Description
Directory Traversal / Arbitrary File Read in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read arbitrary files of the device's filesystem. This vulnerability can be exploited by unauthenticated attackers with access to the web interface.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Homematic CCU3 - Local File Inclusion http/cves/2019/CVE-2019-9726.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.