Lucene search
PRIOn knowledge basePRION:CVE-2019-10121HistoryJul 10, 2019 - 12:15 p.m.
Design/Logic Flaw
2019-07-1012:15:00
PRIOn knowledge base
www.prio-n.com
3
eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.15 use session IDs for authentication but lack authorization checks. An attacker can obtain a session ID via the user authentication dialogue, aka HMCCU-153. This leads to automatic login as admin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ccu2_firmware | lt | 2.41.8 | |
| ccu3_firmware | lt | 3.43.15 |
Related
cve
cve
CVE-2019-10121
2019-07-10 12:15:12
cvelist
cvelist
CVE-2019-10121
2019-07-10 11:54:13
nvd
nvd
CVE-2019-10121
2019-07-10 12:15:12