CVE-2019-9727

Unauthenticated password hash disclosure in the User.getUserPWD method in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to retrieve the GUI password hashes of GUI users. This vulnerability can be exploited by unauthenticated attackers with access to the web interface...

CVE-2019-9727

CVE-2019-9727 affects eQ-3 AG Homematic CCU3 (versions 3.43.15 and earlier). The flaw is an unauthenticated password hash disclosure in the GUI, exposed via User.getUserPWD, allowing remote attackers with access to the web interface to retrieve GUI password hashes. The vulnerability is network-ex...