VulnCheck KEV: CVE-2018-7297

Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access and execute system commands on the device. This vulnerability can be exploited by unauthenticated attackers with access to the web interface...

CVE-2019-9727

Unauthenticated password hash disclosure in the User.getUserPWD method in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to retrieve the GUI password hashes of GUI users. This vulnerability can be exploited by unauthenticated attackers with access to the web interface...

CVE-2019-9726

Directory Traversal / Arbitrary File Read in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read arbitrary files of the device's filesystem. This vulnerability can be exploited by unauthenticated attackers with access to the web interface...

CVE-2019-9726

Directory Traversal / Arbitrary File Read in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read arbitrary files of the device's filesystem. This vulnerability can be exploited by unauthenticated attackers with access to the web interface...

Design/Logic Flaw

Unauthenticated password hash disclosure in the User.getUserPWD method in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to retrieve the GUI password hashes of GUI users. This vulnerability can be exploited by unauthenticated attackers with access to the web interface...

Directory traversal

Directory Traversal / Arbitrary File Read in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read arbitrary files of the device's filesystem. This vulnerability can be exploited by unauthenticated attackers with access to the web interface...

CVE-2019-9727

CVE-2019-9727 affects eQ-3 AG Homematic CCU3 (versions 3.43.15 and earlier). The flaw is an unauthenticated password hash disclosure in the GUI, exposed via User.getUserPWD, allowing remote attackers with access to the web interface to retrieve GUI password hashes. The vulnerability is network-ex...

CVE-2019-9727

Unauthenticated password hash disclosure in the User.getUserPWD method in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to retrieve the GUI password hashes of GUI users. This vulnerability can be exploited by unauthenticated attackers with access to the web interface...

CVE-2019-9726

The connected Nuclei template confirms CVE-2019-9726 affects eQ-3 AG Homematic CCU3 firmware 3.43.15 and earlier, enabling Local File Inclusion (directory traversal) by unauthenticated attackers with access to the web interface to read arbitrary files from the device filesystem. Root cause is imp...

CVE-2019-9726

Directory Traversal / Arbitrary File Read in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read arbitrary files of the device's filesystem. This vulnerability can be exploited by unauthenticated attackers with access to the web interface...

eQ-3 AG Homematic CCU3 Path Traversal Vulnerability

The eQ-3 AG Homematic CCU3 is a set of home automation controls from the German company eQ-3 AG. A path traversal vulnerability exists in eQ-3 AG Homematic CCU3 version 3.43.15 and earlier. The vulnerability stems from a failure of a networked system or product to properly filter special elements...

eQ-3 AG Homematic CCU3 Password Hash Disclosure Vulnerability

The eQ-3 AG Homematic CCU3 is a set of home automation controls from the German company eQ-3 AG. A password hash disclosure vulnerability exists in the User.getUserPWD method in eQ-3 AG Homematic CCU3 3.43.15 and earlier versions. An unauthenticated attacker accessing the web interface could use...

CVE-2017-17691

Homeputer CL Studio fur HomeMatic 4.0 Rel 160808 and earlier uses cleartext to exchange the username and password between server and client instances, which allows remote attackers to obtain sensitive information via a man in the middle attack...

CVE-2017-17691

Homeputer CL Studio fur HomeMatic 4.0 Rel 160808 and earlier uses cleartext to exchange the username and password between server and client instances, which allows remote attackers to obtain sensitive information via a man in the middle attack...

CVE-2017-17691

CVE-2017-17691 affects Homeputer CL Studio for HomeMatic (4.0 Rel 160808 and earlier). The vulnerability arises from cleartext exchange of username and password between server and client, enabling a remote attacker to capture credentials via a man-in-the-middle attack. The provided connected docu...

HomeMatic Zentrale CCU2 - Remote Code Execution

HomeMatic Zentrale CCU2 - Remote Code Execution Exploit Title: HomeMatic Zentrale CCU2 Unauthenticated RCE Date: 16-07-2018 Software Link: https://www.homematic.com/ Exploit Author: Kacper Szurek - ESET Contact: https://twitter.com/KacperSzurek Website: https://security.szurek.pl/ YouTube:...

HomeMatic Zentrale CCU2 Unauthenticated Remote Code Execution Exploit

Exploit for hardware platform in category remote exploits Exploit Title: HomeMatic Zentrale CCU2 Unauthenticated RCE Software Link: https://www.homematic.com/ Exploit Author: Kacper Szurek - ESET Contact: https://twitter.com/KacperSzurek Website: https://security.szurek.pl/ YouTube:...

HomeMatic Zentrale CCU2 - Remote Code Execution

Exploit Title: HomeMatic Zentrale CCU2 Unauthenticated RCE Date: 16-07-2018 Software Link: https://www.homematic.com/ Exploit Author: Kacper Szurek - ESET Contact: https://twitter.com/KacperSzurek Website: https://security.szurek.pl/ YouTube: https://www.youtube.com/c/KacperSzurek Category: remot...

HomeMatic Zentrale CCU2 Unauthenticated Remote Code Execution

Exploit Title: HomeMatic Zentrale CCU2 Unauthenticated RCE Date: 16-07-2018 Software Link: https://www.homematic.com/ Exploit Author: Kacper Szurek - ESET Contact: https://twitter.com/KacperSzurek Website: https://security.szurek.pl/ YouTube: https://www.youtube.com/c/KacperSzurek Category: remot...

HomeMatic Incorrect Access Control Vulnerability

Homeputer CL Studio für HomeMatic is a home automation system from Contronics. An incorrect access control vulnerability exists in HomeMatic that allows an attacker to gain full access to the system...