CVE-2018-7301

2018-02-2219:00:00

mitre

www.cve.org

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.7%

JSON

eQ-3 AG HomeMatic CCU2 2.29.22 devices have an open XML-RPC port without authentication. This can be exploited by sending arbitrary XML-RPC requests to control the attached BidCos devices.

References

atomic111.github.io/article/homematic-ccu2-xml-rpc