HC
Product
Homematic Ccu3 Firmware
13
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 8High 5Medium 0Low 0
Watch
Add Homematic Ccu3 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-15850 | 8.8 | Oct 17 | eQ-3 HomeMatic CCU3 firmware version 3.41.11 allows Remote Code Execution in the ReGa.runScript method Affected: 3.41.11 |
| CVE-2019-9583 | 8.2 | Aug 14 | eQ-3 Homematic CCU2 and CCU3 obtain session IDs without login Affected: 3.41.11; 3.43.16; 3.45.5; 3.45.7; 3.47.10; 3.47.15 |
| CVE-2019-14986 | 8.1 | Aug 13 | eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn before 2.3.0 installed allow administrative operations by unauthenticated attackers with access to the web interface, because… Affected: before 2.3.0 |
| CVE-2019-14984 | 8.1 | Aug 13 | eQ-3 Homematic CCU2 and CCU3 with the XML-API through 1.2.0 AddOn installed allow Remote Code Execution by unauthenticated attackers with access to the web interface, because the… Affected: through 1.2.0 |
| CVE-2019-15849 | 7.3 | Oct 17 | eQ-3 HomeMatic CCU3 firmware 3.41.11 allows session fixation Affected: 3.14.11 |
Showing 5
