CVE-2019-13549

7.5 highEPSS 1.0%

High (7.5) in carel pcoweb firmware. EPSS 1.0% chance of exploitation in the next 30 days.

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems does not provide a sufficient level of protection against unauthorized configuration changes. Primary operations, namely turning the cooling unit on and off and setting the temperature set point, can be modified without authentication.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2019-10-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

carel:pcoweb_firmware

References

http://seclists.org/fulldisclosure/2019/Oct/46
https://www.us-cert.gov/ics/advisories/icsa-19-297-01
http://seclists.org/fulldisclosure/2019/Oct/46
https://www.us-cert.gov/ics/advisories/icsa-19-297-01

Check your stack JSON