Vertiv Liebert Products Authentication Bypass Vulnerability Allowing Webserver Access

An authentication bypass vulnerability has been identified in certain Vertiv Liebert products, including the RDU101 and UNITY models. This vulnerability arises because the affected products do not adequately secure webserver functions, potentially allowing an attacker to bypass authentication. The issue is present in Liebert RDU101 versions through 1.9.0.0 and in Liebert UNITY versions through 8.4.1.0.

Impact

Exploitation of this vulnerability could lead to unauthorized access to webserver functions, allowing for potential authentication bypass. According to CISA, this vulnerability could also be exploited to cause a denial-of-service condition or achieve remote code execution on the affected device.

Remediation

Users are advised to update Liebert RDU101 to version 1.9.1.2_0000001 and Liebert UNITY to version 8.4.3.1_00160. For more information, contact Vertiv or visit the Vertiv Security Support Center.