cve/2019/CVE-2019-13553.md

### [CVE-2019-13553](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13553)
![](https://img.shields.io/static/v1?label=Product&message=Rittal%20Chiller%20SK%203232-Series&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=USE%20OF%20HARD-CODED%20CREDENTIALS%20CWE-798&color=brighgreen)

### Description

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems is configured using hard-coded credentials. These credentials could allow attackers to influence the primary operations of the affected systems, namely turning the cooling unit on and off and setting the temperature set point.

### POC

#### Reference
- http://seclists.org/fulldisclosure/2019/Oct/45

#### Github
No PoCs found on GitHub currently.