Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access and execute system commands on the device. This vulnerability can be exploited by unauthenticated attackers with access to the web interface.
CPE | Name | Operator | Version |
---|---|---|---|
homematic_central_control_unit_ccu2_firmware | le | 2.29.22 |