eq-3 homematic ccu2 firmware vulnerabilities and exploits

(subscribe to this query)

eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the HM-Print AddOn up to and including 1.2a installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the exec.cgi and exec1.cgi scripts, which execute TCL script content from an HTTP ...

Hm-print Project Hm-print 1.2a Eq-3 Homematic Ccu2 Firmware 2.47.20 Hm-print Project Hm-print 1.2 Eq-3 Homematic Ccu3 Firmware 3.47.18

eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the Script Parser AddOn up to and including 1.8 installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the exec.cgi script, which executes TCL script content from an HTTP POST reque...

Scriptparser Project Scriptparser 1.8 Eq-3 Homematic Ccu2 Firmware 2.47.20 Eq-3 Homematic Ccu3 Firmware 3.47.18 Scriptparser Project Scriptparser 1.7 Scriptparser Project Scriptparser 1.6 Scriptparser Project Scriptparser 1.5 Scriptparser Project Scriptparser 1.4 Scriptparser Project Scriptparser 1.3 Scriptparser Project Scriptparser 1.2 Scriptparser Project Scriptparser 1.0

eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the E-Mail AddOn up to and including 1.6.8.c installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the save.cgi script for payload upload and the testtcl.cgi script for its executi...

Hm Email Project Hm Email 1.6.8c Eq-3 Homematic Ccu2 Firmware 2.24.20 Eq-3 Homematic Ccu3 Firmware 3.47.18 Hm Email Project Hm Email 1.6.8b Hm Email Project Hm Email 1.6.8a Hm Email Project Hm Email 1.6.7c Hm Email Project Hm Email 1.6.7b Hm Email Project Hm Email 1.6.7a Hm Email Project Hm Email 1.6.7 Hm Email Project Hm Email 1.6.6 Hm Email Project Hm Email 1.6.5 Hm Email Project Hm Email 1.6.4 Hm Email Project Hm Email 1.6.3 Hm Email Project Hm Email 1.6.2 Hm Email Project Hm Email 1.6.0 Hm Email Project Hm Email 1.6.8

A Remote Code Execution (RCE) vulnerability in the WebUI component of the eQ-3 HomeMatic CCU2 firmware up to and including version 2.57.5 and CCU3 firmware up to and including version 3.57.5 allows remote unauthenticated malicious users to execute system commands as root via a si...

Eq-3 Homematic Ccu2 Firmware Eq-3 Homematic Ccu3 Firmware

In /usr/local/etc/config/addons/mh/loopupd.sh on eQ-3 AG HomeMatic CCU2 2.29.22 devices, software update packages are downloaded via the HTTP protocol, which does not provide any cryptographic protection of the downloaded contents. An attacker with a privileged network position (...

Eq-3 Homematic Central Control Unit Ccu2 Firmware 2.29.22

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook