Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and previous versions allows remote malicious users to obtain read/write access and execute system commands on the device. This vulnerability can be exploited by unauthenticated attackers with access to the web interface.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
eq-3 homematic_central_control_unit_ccu2_firmware |