Skip to content
OpenAdvisories
Unscored CVE-2019-14985 EUVD-2019-6074GHSA-3h9w-c639-p2qf

eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn installed allow Remote Code Execution by unauthenticated attackers with access to the web …

Published Aug 13, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn installed allow Remote Code Execution by unauthenticated attackers with access to the web interface, because this interface can access the CMD_EXEC virtual device type 28.

References