11 matches found
CVE-2020-12834
eQ-3 Homematic Central Control Unit CCU2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSON API Method ReGa.runScript, by unauthenticated attackers with access to the web interface, due to the default auto-login feature being enabled during first-time setup or factory...
Design/Logic Flaw
eQ-3 Homematic Central Control Unit CCU2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSON API Method ReGa.runScript, by unauthenticated attackers with access to the web interface, due to the default auto-login feature being enabled during first-time setup or factory...
CVE-2020-12834
eQ-3 Homematic Central Control Unit CCU2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSON API Method ReGa.runScript, by unauthenticated attackers with access to the web interface, due to the default auto-login feature being enabled during first-time setup or factory...
PT-2020-13281
Name of the Vulnerable Software and Affected Versions eQ-3 Homematic Central Control Unit CCU versions 2 through 2.51.6 eQ-3 Homematic Central Control Unit CCU3 versions 3 through 3.51.6 Description The issue allows Remote Code Execution in the JSON API Method ReGa.runScript, by unauthenticated...
CVE-2020-12834: Incorrect Default Permissions
eQ-3 Homematic Central Control Unit CCU2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSON API Method ReGa.runScript, by unauthenticated attackers with access to the web interface, due to the default auto-login feature being enabled during first-time setup or factory...
CVE-2019-15850
eQ-3 HomeMatic CCU3 firmware version 3.41.11 allows Remote Code Execution in the ReGa.runScript method. An authenticated attacker can easily execute code and compromise the system...
Remote code execution
eQ-3 HomeMatic CCU3 firmware version 3.41.11 allows Remote Code Execution in the ReGa.runScript method. An authenticated attacker can easily execute code and compromise the system...
CVE-2019-15850
eQ-3 HomeMatic CCU3 firmware version 3.41.11 allows Remote Code Execution in the ReGa.runScript method. An authenticated attacker can easily execute code and compromise the system...
CVE-2019-15850
The CVE-2019-15850 entry concerns eQ-3 Homematic CCU3 firmware 3.41.11 with a remote code execution flaw in the ReGa.runScript method. An authenticated attacker can execute code and compromise the system, as indicated by multiple sources (NVD, RH, CNVD, CNVD-CNVD). The affected product is the eQ-...
PT-2019-14436
Name of the Vulnerable Software and Affected Versions eQ-3 HomeMatic CCU3 version 3.41.11 Description The issue allows for Remote Code Execution in the ReGa.runScript method. An authenticated attacker can easily execute code and compromise the system. Recommendations For version 3.41.11, consider...
CVE-2019-15850: Missing Authorization
eQ-3 HomeMatic CCU3 firmware version 3.41.11 allows Remote Code Execution in the ReGa.runScript method. An authenticated attacker can easily execute code and compromise the system...