High severity7.5NVD Advisory· Published Oct 25, 2019· Updated Jun 17, 2026
CVE-2019-13549
CVE-2019-13549
Description
Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems does not provide a sufficient level of protection against unauthorized configuration changes. Primary operations, namely turning the cooling unit on and off and setting the temperature set point, can be modified without authentication.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:o:carel:pcoweb_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:carel:pcoweb_firmware:*:*:*:*:*:*:*:*range: >=a1.5.3,<=b1.2.4
- (no CPE)range: A1.5.3 – B1.2.4
- Rittal/Chiller SK 3232-Series web interfacedescription
- Range: A1.5.3 – B1.2.4
Patches
Vulnerability mechanics
References
2- www.us-cert.gov/ics/advisories/icsa-19-297-01nvdThird Party AdvisoryUS Government Resource
- seclists.org/fulldisclosure/2019/Oct/46nvd
News mentions
0No linked articles in our index yet.