Eq-3 Homematic_central_control_unit_ccu2_firmware
5 CVEs affecting Eq-3 Homematic_central_control_unit_ccu2_firmware. Latest disclosed: 2018-02-22. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-7301 | Critical | 9.8 | 2018-02-22 | eQ-3 AG HomeMatic CCU2 2.29.22 devices have an open XML-RPC port without authentication. This can be exploited by sending arbitrary XML-RPC requests to control… |
CVE-2018-7297 | Critical | 9.8 | 2018-02-22 | Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access and execut… |
CVE-2018-7298 | High | 8.1 | 2018-02-22 | In /usr/local/etc/config/addons/mh/loopupd.sh on eQ-3 AG HomeMatic CCU2 2.29.22 devices, software update packages are downloaded via the HTTP protocol, which d… |
CVE-2018-7299 | High | 8.0 | 2018-02-22 | Remote Code Execution in the addon installation process in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows authenticated attackers to create or overwrite arbi… |
CVE-2018-7296 | Medium | 5.3 | 2018-02-22 | Directory Traversal / Arbitrary File Read in User.getLanguage method in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to read the first lin… |