Homematic Ccu2 Firmware vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

HC

Product

Homematic Ccu2 Firmware

by Eq-3 · last CVE Jul 22, 2021

14

CVEs

0

On KEV

10.0

Max CVSS

0

New 30D

Vulnerabilities14 In the news0 Timeline

Severity mix

Critical 10High 4Medium 0Low 0

Severity

All severities14 Critical10 High4 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Homematic Ccu2 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-9583	8.2	2%	Aug 14	eQ-3 Homematic CCU2 and CCU3 obtain session IDs without login Affected: 2.35.16; 2.41.5; 2.41.8; 2.41.9; 2.45.6; 2.45.7; +3 more
CVE-2019-14986	8.1	3%	Aug 13	eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn before 2.3.0 installed allow administrative operations by unauthenticated attackers with access to the web interface, because… Affected: before 2.3.0
CVE-2019-14984	8.1	6%	Aug 13	eQ-3 Homematic CCU2 and CCU3 with the XML-API through 1.2.0 AddOn installed allow Remote Code Execution by unauthenticated attackers with access to the web interface, because the… Affected: through 1.2.0
CVE-2019-9582	7.5	2%	Aug 14	eQ-3 Homematic CCU2 outdated base software packages allows Denial of Service Affected: 2.35.16; 2.41.5; 2.41.8; 2.41.9; 2.45.6; 2.45.7; +3 more