eq-3 homematic ccu3 firmware 3.41.11 vulnerabilities and exploits

(subscribe to this query)

eQ-3 HomeMatic CCU3 firmware version 3.41.11 allows Remote Code Execution in the ReGa.runScript method. An authenticated attacker can easily execute code and compromise the system.

Eq-3 Homematic Ccu3 Firmware 3.41.11

eQ-3 Homematic CCU2 and CCU3 obtain session IDs without login. This allows a Denial of Service and is a starting point for other attacks. Affected versions for CCU2: 2.35.16, 2.41.5, 2.41.8, 2.41.9, 2.45.6, 2.45.7, 2.47.10, 2.47.12, 2.47.15. Affected versions for CCU3: 3.41.11, 3...

Eq-3 Homematic Ccu3 Firmware 3.41.11 Eq-3 Homematic Ccu3 Firmware 3.43.16 Eq-3 Homematic Ccu3 Firmware 3.45.5 Eq-3 Homematic Ccu3 Firmware 3.45.7 Eq-3 Homematic Ccu3 Firmware 3.47.10 Eq-3 Homematic Ccu3 Firmware 3.47.15 Eq-3 Homematic Ccu2 Firmware -Eq-3 Homematic Ccu2 Firmware 2.35.16 Eq-3 Homematic Ccu2 Firmware 2.41.5 Eq-3 Homematic Ccu2 Firmware 2.41.8 Eq-3 Homematic Ccu2 Firmware 2.41.9 Eq-3 Homematic Ccu2 Firmware 2.45.6 Eq-3 Homematic Ccu2 Firmware 2.45.7 Eq-3 Homematic Ccu2 Firmware 2.47.10 Eq-3 Homematic Ccu2 Firmware 2.47.12 Eq-3 Homematic Ccu2 Firmware 2.47.15

eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn installed allow Remote Code Execution by unauthenticated attackers with access to the web interface, because this interface can access the CMD_EXEC virtual device type 28.

Eq-3 Homematic Ccu2 Firmware 2.35.16 Eq-3 Homematic Ccu2 Firmware 2.41.5 Eq-3 Homematic Ccu2 Firmware 2.41.8 Eq-3 Homematic Ccu2 Firmware 2.41.9 Eq-3 Homematic Ccu2 Firmware 2.45.6 Eq-3 Homematic Ccu2 Firmware 2.45.7 Eq-3 Homematic Ccu2 Firmware 2.47.10 Eq-3 Homematic Ccu2 Firmware 2.47.12 Eq-3 Homematic Ccu2 Firmware 2.47.15 Eq-3 Homematic Ccu3 Firmware 3.41.11 Eq-3 Homematic Ccu3 Firmware 3.43.16 Eq-3 Homematic Ccu3 Firmware 3.45.5 Eq-3 Homematic Ccu3 Firmware 3.45.7 Eq-3 Homematic Ccu3 Firmware 3.47.10 Eq-3 Homematic Ccu3 Firmware 3.47.15

eQ-3 HomeMatic CCU3 firmware 3.41.11 allows session fixation. An attacker can create session IDs and send them to the victim. After the victim logs in to the session, the attacker can use that session. The attacker could create SSH logins after a valid session and easily compromi...

Eq-3 Homematic Ccu3 Firmware 3.14.11

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook