Skip to content

Eq-3 vulnerabilities

Products

Newest

eq-3 homematic ccu2 firmware, homematic ccu3 firmware +1 more eQ-3 HomeMatic CCU2 2.57.5 and CCU3 3.57.5 devices allow remote code execution. CVE-2021-33032 EPSS 52.2% 10.0 CriticalJuly 22, 2021
eq-3 ccu3 firmware, homematic ccu2 firmware +1 more eQ-3 Homematic Central Control Unit (CCU)2 through 2.51.6 and CCU3 through 3.51.6 allow Remote... CVE-2020-12834 EPSS 11.1% 9.8 CriticalMay 15, 2020
hm-print project hm-print, eq-3 homematic ccu2 firmware, homematic ccu3 firmware +2 more eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the HM-Print AddOn through 1.2a installed allow... CVE-2019-18939 EPSS 40.8% 9.8 CriticalNovember 14, 2019
eq-3 homematic ccu2 firmware, homematic ccu3 firmware, hm email project email +2 more eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the E-Mail AddOn through 1.6.8.c installed... CVE-2019-18938 EPSS 33.8% 9.8 CriticalNovember 14, 2019
eq-3 homematic ccu2 firmware, homematic ccu3 firmware, scriptparser project scriptparser +2 more eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the Script Parser AddOn through 1.8 installed... CVE-2019-18937 EPSS 33.8% 9.8 CriticalNovember 14, 2019
eq-3 homematic ccu3 firmware eQ-3 HomeMatic CCU3 firmware version 3.41.11 allows Remote Code Execution in the ReGa.runScript... CVE-2019-15850 EPSS 15.6% 8.8 HighOctober 17, 2019
eq-3 homematic ccu3 firmware eQ-3 HomeMatic CCU3 firmware 3.41.11 allows session fixation. An attacker can create session IDs... CVE-2019-15849 7.3 HighOctober 17, 2019
eq-3 cux-daemon, ccu2 firmware +1 more A Remote Code Execution (RCE) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU... CVE-2019-14423 EPSS 19.9% 8.8 HighOctober 17, 2019
eq-3 cux-daemon, ccu2 firmware +1 more A Local File Inclusion (LFI) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU... CVE-2019-14424 6.5 MediumOctober 17, 2019
eq-3 homematic ccu2 firmware, homematic ccu3 firmware +1 more eQ-3 Homematic CCU2 before 2.47.18 and CCU3 before 3.47.18 allow Remote Code Execution by... CVE-2019-16199 9.8 CriticalSeptember 17, 2019
eq-3 homematic ccu2 firmware, homematic ccu3 firmware +1 more eQ-3 Homematic CCU2 prior to 2.47.10 and CCU3 prior to 3.47.10 JSON API has Improper Access... CVE-2019-9585 9.8 CriticalAugust 14, 2019
eq-3 homematic ccu2 firmware, homematic ccu3 firmware +1 more eQ-3 Homematic AddOn 'CloudMatic' on CCU2 and CCU3 allows uncontrolled admin access, resulting in... CVE-2019-9584 9.8 CriticalAugust 14, 2019
eq-3 homematic ccu2 firmware eQ-3 Homematic CCU2 outdated base software packages allows Denial of Service. CCU2 affected... CVE-2019-9582 7.5 HighAugust 14, 2019
eq-3 homematic ccu2 firmware, homematic ccu3 firmware +1 more eQ-3 Homematic CCU2 and CCU3 obtain session IDs without login. This allows a Denial of Service... CVE-2019-9583 8.2 HighAugust 14, 2019
eq-3 homematic ccu2 firmware, homematic ccu3 firmware +1 more eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn before 2.3.0 installed allow administrative... CVE-2019-14986 8.1 HighAugust 13, 2019
eq-3 homematic ccu2 firmware, homematic ccu3 firmware +1 more eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn installed allow Remote Code Execution by... CVE-2019-14985 9.8 CriticalAugust 13, 2019
eq-3 homematic ccu2 firmware, homematic ccu3 firmware +1 more eQ-3 Homematic CCU2 and CCU3 with the XML-API through 1.2.0 AddOn installed allow Remote Code... CVE-2019-14984 8.1 HighAugust 13, 2019
eq-3 ccu3 firmware eQ-3 Homematic CCU3 3.47.15 and prior has Improper Input Validation in function 'Call()' of ReGa... CVE-2019-14474 7.5 HighAugust 7, 2019
eq-3 ccu2 firmware, ccu3 firmware +1 more eQ-3 Homematic CCU2 and CCU3 use session IDs for authentication but lack authorization checks.... CVE-2019-14473 8.8 HighAugust 6, 2019
eq-3 ccu2 firmware, ccu3 firmware +1 more eQ-3 Homematic CCU2 2.47.15 and prior and CCU3 3.47.15 and prior use session IDs for... CVE-2019-14475 7.5 HighAugust 5, 2019
eq-3 ccu2 firmware, ccu3 firmware +1 more eQ-3 HomeMatic CCU2 devices before 2.41.9 and CCU3 devices before 3.43.16 have buffer overflows... CVE-2019-10122 9.8 CriticalJuly 10, 2019
eq-3 ccu2 firmware, ccu3 firmware +1 more eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.15 use session IDs for... CVE-2019-10121 9.8 CriticalJuly 10, 2019
eq-3 ccu2 firmware, ccu3 firmware +1 more eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.16 use session IDs for... CVE-2019-10119 9.8 CriticalJuly 10, 2019
eq-3 ccu2 firmware, ccu3 firmware +1 more On eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.16, automatic login... CVE-2019-10120 8.8 HighJuly 10, 2019
eq-3 ccu3 firmware Unauthenticated password hash disclosure in the User.getUserPWD method in eQ-3 AG Homematic CCU3... CVE-2019-9727 7.5 HighMay 13, 2019
eq-3 ccu3 firmware Directory Traversal / Arbitrary File Read in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows... CVE-2019-9726 EPSS 15.9% 7.5 HighMay 13, 2019
eq-3 homematic central control unit ccu2 firmware eQ-3 AG HomeMatic CCU2 2.29.22 devices have an open XML-RPC port without authentication. This can... CVE-2018-7301 9.8 CriticalFebruary 22, 2018
eq-3 homematic ccu2 firmware Directory Traversal / Arbitrary File Write / Remote Code Execution in the User.setLanguage method... CVE-2018-7300 Public exploit EPSS 30.6% 9.8 CriticalFebruary 22, 2018
eq-3 homematic central control unit ccu2 firmware Remote Code Execution in the addon installation process in eQ-3 AG Homematic CCU2 2.29.2 and... CVE-2018-7299 8.0 HighFebruary 22, 2018
eq-3 homematic central control unit ccu2 firmware In /usr/local/etc/config/addons/mh/loopupd.sh on eQ-3 AG HomeMatic CCU2 2.29.22 devices, software... CVE-2018-7298 8.1 HighFebruary 22, 2018
eq-3 homematic central control unit ccu2 firmware Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier... CVE-2018-7297 Public exploit EPSS 64.3% 9.8 CriticalFebruary 22, 2018
eq-3 homematic central control unit ccu2 firmware Directory Traversal / Arbitrary File Read in User.getLanguage method in eQ-3 AG Homematic CCU2 2... CVE-2018-7296 5.3 MediumFebruary 22, 2018