HC
Product
Homematic Ccu2 Firmware
14
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 10High 4Medium 0Low 0
Watch
Add Homematic Ccu2 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-33032 | 10.0 | Jul 22 | A Remote Code Execution (RCE) vulnerability in the WebUI component of the eQ-3 HomeMatic CCU2 firmware up to and including version 2.57.5 and CCU3 firmware up to and including… Affected: through 2.57.5 |
| CVE-2020-12834 | 9.8 | May 15 | eQ-3 Homematic Central Control Unit (CCU)2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSON API Method ReGa.runScript, by unauthenticated attackers… Affected: through 2.51.6 |
| CVE-2019-18939 | 9.8 | Nov 14 | eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the HM-Print AddOn through 1.2a installed allow Remote Code Execution by unauthenticated attackers with access to the web… Affected: 2.47.20; 2.47.20 |
| CVE-2019-18938 | 9.8 | Nov 14 | eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the E-Mail AddOn through 1.6.8.c installed allow Remote Code Execution by unauthenticated attackers with access to the web… Affected: 2.24.20; 2.24.20; 2.24.20; 2.24.20; 2.24.20; 2.24.20; +8 more |
| CVE-2019-18937 | 9.8 | Nov 14 | eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the Script Parser AddOn through 1.8 installed allow Remote Code Execution by unauthenticated attackers with access to the web… Affected: 2.47.20; 2.47.20; 2.47.20; 2.47.20; 2.47.20; 2.47.20; +3 more |
| CVE-2019-16199 | 9.8 | Sep 17 | eQ-3 Homematic CCU2 before 2.47.18 and CCU3 before 3.47.18 allow Remote Code Execution by unauthenticated attackers with access to the web interface via an HTTP POST request to… Affected: before 2.47.18 |
| CVE-2019-9585 | 9.8 | Aug 14 | eQ-3 Homematic CCU2 prior to 2.47.10 and CCU3 prior to 3.47.10 JSON API has Improper Access Control for Interface.***Metadata related operations, resulting in the ability to read,… Affected: before 2.47.10 |
| CVE-2019-9584 | 9.8 | Aug 14 | eQ-3 Homematic AddOn 'CloudMatic' on CCU2 and CCU3 allows uncontrolled admin access, resulting in the ability to obtain VPN profile details, shutting down the VPN service and to… Affected: through 2.47.15 |
| CVE-2019-14985 | 9.8 | Aug 13 | eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn installed allow Remote Code Execution by unauthenticated attackers with access to the web interface, because this interface can… Affected: 2.35.16; 2.41.5; 2.41.8; 2.41.9; 2.45.6; 2.45.7; +3 more |
| CVE-2018-7300 | 9.8 | Feb 22 | Directory Traversal / Arbitrary File Write / Remote Code Execution in the User.setLanguage method in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to write… Affected: through 2.29.22 |
Showing 10