PT-2019-14436 · Eq 3 · Homematic Ccu3

Joshua Lehr · Publicado 2019-10-17 · Atualizado 2020-08-24 · CVE-2019-15850

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions eQ-3 HomeMatic CCU3 version 3.41.11

Description The issue allows for Remote Code Execution in the ReGa.runScript method. An authenticated attacker can easily execute code and compromise the system.

Recommendations For version 3.41.11, consider disabling the ReGa.runScript method until a patch is available to prevent Remote Code Execution.

Exploit

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2019-15850

Produtos afetados

Homematic Ccu3

Referências · 4

• 🔥 https://noskill1337.github.io/homematic-ccu3-remote-code-execution · Exploit
• https://eq-3.com/products/homematic.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-15850 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-15850 · Nota de Segurança