NetSight
high8.0

CVE-2018-7299

Remote Code Execution in the addon installation process in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows authenticated attackers to create or overwrite arbi…

Impact

Remote Code Execution in the addon installation process in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows authenticated attackers to create or overwrite arbitrary files or install malicious software on the device.

Affected products

VendorProductAffected versions
Eq-3Homematic Central Control Unit Ccu2 Firmware
through 2.29.22

References