CF
Product
Ccu2 Firmware
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 4Medium 1Low 0
Watch
Add Ccu2 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-10122 | 9.8 | Jul 10 | eQ-3 HomeMatic CCU2 devices before 2.41.9 and CCU3 devices before 3.43.16 have buffer overflows in the ReGa ise GmbH HTTP-Server 2.0 component, aka HMCCU-179 Affected: before 2.41.9 |
| CVE-2019-10121 | 9.8 | Jul 10 | eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.15 use session IDs for authentication but lack authorization checks Affected: before 2.41.8 |
| CVE-2019-10119 | 9.8 | Jul 10 | eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.16 use session IDs for authentication but lack authorization checks Affected: before 2.41.8 |
| CVE-2019-14423 | 8.8 | Oct 17 | A Remote Code Execution (RCE) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to execute system… Affected: 2.35.16 through 2.45.6 |
| CVE-2019-14473 | 8.8 | Aug 6 | eQ-3 Homematic CCU2 and CCU3 use session IDs for authentication but lack authorization checks Affected: through 2.47.15 |
| CVE-2019-10120 | 8.8 | Jul 10 | On eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.16, automatic login configuration (aka setAutoLogin) can be achieved by continuing to use a session ID… Affected: before 2.41.8 |
| CVE-2019-14475 | 7.5 | Aug 5 | eQ-3 Homematic CCU2 2.47.15 and prior and CCU3 3.47.15 and prior use session IDs for authentication but lack authorization checks Affected: through 2.47.15 |
| CVE-2019-14424 | 6.5 | Oct 17 | A Local File Inclusion (LFI) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to read sensitive… Affected: 2.35.16 through 2.45.6 |
Showing 8