What is CVE-2019-13030?

CVE-2019-13030 is a high-severity vulnerability in Mediola Neo Server, classified under Direct Request (Forced Browsing). CVSS score: 8.2/10. Published 2019-08-14.

How severe is CVE-2019-13030?

High severity. CVSS v3 base score is 8.2 out of 10.

Vulnerability in Mediola Neo Server

CVE-2019-13030

eQ-3 Homematic CCU3 AddOn 'Mediola NEO Server for Homematic CCU3' prior to 2.4.5 allows uncontrolled admin access to start or stop the Node.js process, resulting in the ability to obtain mediola configuration details. This is related to improper access control for addons configuration pages and a missing check in rc.d/97NeoServer.

EPSS: 0.019 (77.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H.

Affected products

Mediola Neo_server
N/a — versions n/a

Weakness classification (CWE)

CWE-425 — Direct Request (Forced Browsing)

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2019-13030?: CVE-2019-13030 is a high-severity vulnerability in Mediola Neo Server, classified under Direct Request (Forced Browsing). CVSS score: 8.2/10. Published 2019-08-14.
How severe is CVE-2019-13030?: High severity. CVSS v3 base score is 8.2 out of 10.