PT-2019-13913 · Eq 3 · Cuxd Addon+2

Psytester · Publicado 2019-08-13 · Atualizado 2020-08-24 · CVE-2019-14986

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn versions prior to 2.3.0

Description The issue allows administrative operations to be performed by unauthenticated attackers who have access to the web interface. This is because certain features, such as the File-Browser and Shell Command, as well as the ability to "Set root password", are exposed.

Recommendations For eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn versions prior to 2.3.0, update to version 2.3.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the web interface to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2019-14986

Produtos afetados

Cuxd Addon

Eq-3 Homematic Ccu2

Eq-3 Homematic Ccu3

Referências · 3

• 🔥 https://psytester.github.io/CVE-2019-14986 · Exploit
• https://osv.dev/vulnerability/CVE-2019-14986 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-14986 · Nota de Segurança