CVE-2018-7301

2018-02-22T19:29:00
ID CVE-2018-7301
Type cve
Reporter cve@mitre.org
Modified 2018-03-18T14:18:00

Description

eQ-3 AG HomeMatic CCU2 2.29.22 devices have an open XML-RPC port without authentication. This can be exploited by sending arbitrary XML-RPC requests to control the attached BidCos devices.