CF
Product
Ccu3 Firmware
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 6Medium 0Low 0
Watch
Add Ccu3 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-12834 | 9.8 | May 15 | eQ-3 Homematic Central Control Unit (CCU)2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSON API Method ReGa.runScript, by unauthenticated attackers… Affected: through 3.51.6 |
| CVE-2019-10122 | 9.8 | Jul 10 | eQ-3 HomeMatic CCU2 devices before 2.41.9 and CCU3 devices before 3.43.16 have buffer overflows in the ReGa ise GmbH HTTP-Server 2.0 component, aka HMCCU-179 Affected: before 3.43.16 |
| CVE-2019-10121 | 9.8 | Jul 10 | eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.15 use session IDs for authentication but lack authorization checks Affected: before 3.43.15 |
| CVE-2019-10119 | 9.8 | Jul 10 | eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.16 use session IDs for authentication but lack authorization checks Affected: before 3.43.16 |
Showing 4