critical9.8
CVE-2019-14985
eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn installed allow Remote Code Execution by unauthenticated attackers with access to the web interface, because t…
Impact
eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn installed allow Remote Code Execution by unauthenticated attackers with access to the web interface, because this interface can access the CMD_EXEC virtual device type 28.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eq-3 | Homematic Ccu2 Firmware | Versions 2.35.16, 2.41.5, 2.41.8, 2.41.9, 2.45.6, 2.45.7 |
| Eq-3 | Homematic Ccu3 Firmware | Versions 3.41.11, 3.43.16, 3.45.5, 3.45.7, 3.47.10, 3.47.15 |