CVE-2019-13030

eQ-3 Homematic CCU3 AddOn 'Mediola NEO Server for Homematic CCU3' prior to 2.4.5 allows uncontrolled admin access to start or stop the Node.js process, resulting in the ability to obtain mediola configuration details. This is related to improper access control for addons configuration pages and a...

PT-2019-13088

Name of the Vulnerable Software and Affected Versions eQ-3 Homematic CCU3 AddOn 'Mediola NEO Server for Homematic CCU3' versions prior to 2.4.5 Description The issue is related to improper access control for addons configuration pages and a missing check in rc.d/97NeoServer, allowing uncontrolled...

CVE-2019-13030: Direct Request

eQ-3 Homematic CCU3 AddOn 'Mediola NEO Server for Homematic CCU3' prior to 2.4.5 allows uncontrolled admin access to start or stop the Node.js process, resulting in the ability to obtain mediola configuration details. This is related to improper access control for addons configuration pages and a...