CVE:CVE-2020-11955
CNNVD:CNNVD-202007-508
Rittal CMC III PU等都是德国威图（Rittal）公司的产品。CMC III PU是一款用于IT、建筑和工业应用的监控处理单元。LCP-CW是一款液体冷却设备。IoT Interface是一款用于设备/系统间通信的IoT（物联网）接口。
Rittal PDU-3C002DEC 5.15.70及之前版本和CMCIII-PU-9333E0FB 3.15.70及之前版本中存在安全漏洞。攻击者可通过操纵影子文件利用该漏洞将权限提升至root。
solution:Upgrade rittal cmciii-pu-9333e0fb_firmware to a higher version than 3.15.70,and avoid the version (,3.15.70]; Upgrade rittal pdu-3c002dec_firmware to a higher version than 5.15.70,and avoid the version (,5.15.70]; Upgrade rittal cmc_iii_pu_7030.000_firmware to a higher version than 3.15.70_4,and avoid the version (,3.15.70_4]; Upgrade rittal lcp-cw_firmware to a higher version than 3.15.70_4,and avoid the version (,3.15.70_4]; Upgrade rittal iot_interface_3124.300 to a higher version than 6.17.00,and avoid the version (,6.17.00]