critical9.8Public exploit code
CVE-2018-7297
Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access and execut…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Homematic CCU2 2.29.23 - Remote Command Execution2018-03-30 · webapps · cgi
Impact
Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access and execute system commands on the device. This vulnerability can be exploited by unauthenticated attackers with access to the web interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eq-3 | Homematic Central Control Unit Ccu2 Firmware | through 2.29.22 |