Kieback Peter Ddc4002 vulnerabilities

CVE-2024-43698 [CRITICAL] CWE-1391 CVE-2024-43698: Kieback & Peter's DDC4000 series uses weak credentials, which may allow an unauthenticated attacker Kieback & Peter's DDC4000 series uses weak credentials, which may allow an unauthenticated attacker to get full admin rights on the system.

CVE-2024-41717 [CRITICAL] CWE-22 CVE-2024-41717: Kieback & Peter's DDC4000 series is vulnerable to a path traversal vulnerability, which may allow an Kieback & Peter's DDC4000 series is vulnerable to a path traversal vulnerability, which may allow an unauthenticated attacker to read files on the system.

CVE-2024-43812 [HIGH] CWE-522 CVE-2024-43812: Kieback & Peter's DDC4000 series has an insufficiently protected credentials vulnerability, which ma Kieback & Peter's DDC4000 series has an insufficiently protected credentials vulnerability, which may allow an unauthenticated attacker with access to /etc/passwd to read the password hashes of all users on the system.

CVE-2026-4293 [MEDIUM] CWE-79 CVE-2026-4293: The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting, enabli The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting, enabling JavaScript to be executed by the victim's browser, which allows the attacker to control the browser.