CVE-2019-16199

CRITICAL

9.8

Descricao

eQ-3 Homematic CCU2 before 2.47.18 and CCU3 before 3.47.18 allow Remote Code Execution by unauthenticated attackers with access to the web interface via an HTTP POST request to certain URLs related to the ReGa core process.

Detalhes CVE

Pontuacao CVSS v3.19.8

SeveridadeCRITICAL

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado9/17/2019

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

eq-3:homematic_ccu2eq-3:homematic_ccu2_firmwareeq-3:homematic_ccu3eq-3:homematic_ccu3_firmware

Fraquezas (CWE)

CWE-306

Referencias

https://psytester.github.io/CVE-2019-16199/(cve@mitre.org)

https://psytester.github.io/CVE-2019-16199/(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.