CVE-2019-15850

HIGH

8.8

Description

eQ-3 HomeMatic CCU3 firmware version 3.41.11 allows Remote Code Execution in the ReGa.runScript method. An authenticated attacker can easily execute code and compromise the system.

Details CVE

Score CVSS v3.18.8

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisLOW

Interaction utilisateurNONE

Publie10/17/2019

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

eq-3:homematic_ccu3eq-3:homematic_ccu3_firmware

Faiblesses (CWE)

CWE-862

References

https://noskill1337.github.io/homematic-ccu3-remote-code-execution(cve@mitre.org)

https://www.eq-3.com/products/homematic.html(cve@mitre.org)

https://noskill1337.github.io/homematic-ccu3-remote-code-execution(af854a3a-2127-422b-91ae-364da2661108)

https://www.eq-3.com/products/homematic.html(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.