PT-2020-13281 · Eq 3 · Eq-3 Homematic Central Control Unit

Psytester · Published 2020-05-15 · Updated 2020-05-21 · CVE-2020-12834

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions eQ-3 Homematic Central Control Unit (CCU) versions 2 through 2.51.6 eQ-3 Homematic Central Control Unit (CCU3) versions 3 through 3.51.6

Description The issue allows Remote Code Execution in the JSON API Method ReGa.runScript, by unauthenticated attackers with access to the web interface, due to the default auto-login feature being enabled during first-time setup or factory reset.

Recommendations For eQ-3 Homematic Central Control Unit (CCU) versions 2 through 2.51.6, disable the default auto-login feature to prevent exploitation. For eQ-3 Homematic Central Control Unit (CCU3) versions 3 through 3.51.6, disable the default auto-login feature to prevent exploitation. As a temporary workaround, consider disabling the ReGa.runScript method until a patch is available.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2020-12834

Affected Products

Eq-3 Homematic Central Control Unit

References · 4

• 🔥 https://psytester.github.io/CVE-2020-12834 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-12834 · Security Note
• https://osv.dev/vulnerability/CVE-2020-12834 · Vendor Advisory
• https://t.me/cvenotify/3842 · Telegram Post