Homematic Ccu3 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:eq-3:homematic_ccu3_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Eq 3 (11715dba-e07d-5393-bfe8-7d5685450e28) |
|---|---|
| Product | Homematic Ccu3 Firmware (1df9f043-f131-568e-85ef-1a3aeb94f447) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-33032 |
vulnerable | 2026-06-08 05:32:08.539399 |
Details available
A Remote Code Execution (RCE) vulnerability in the WebUI component of the eQ-3 HomeMatic CCU2 firmware up to and including version 2.57.5 and CCU3 firmware up to and including version 3.57.5 allows remote unauthenticated attackers to execute system commands as root via a simple HTTP request.
Published: 2021-07-22T17:45:35.000Z
Updated: 2024-08-03T23:42:19.135Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9585 |
vulnerable | 2026-06-08 05:14:25.772388 |
Details available
eQ-3 Homematic CCU2 prior to 2.47.10 and CCU3 prior to 3.47.10 JSON API has Improper Access Control for Interface.***Metadata related operations, resulting in the ability to read, set and deletion of Metadata.
Published: 2019-08-14T20:10:17.000Z
Updated: 2024-08-04T21:54:44.538Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9584 |
vulnerable | 2026-06-08 05:14:25.771693 |
Details available
eQ-3 Homematic AddOn 'CloudMatic' on CCU2 and CCU3 allows uncontrolled admin access, resulting in the ability to obtain VPN profile details, shutting down the VPN service and to delete the VPN service configuration. This is related to improper access control for all /addons/mh/ pages.
Published: 2019-08-14T20:03:06.000Z
Updated: 2024-08-04T21:54:44.866Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16199 |
vulnerable | 2026-06-08 05:13:07.885681 |
Details available
eQ-3 Homematic CCU2 before 2.47.18 and CCU3 before 3.47.18 allow Remote Code Execution by unauthenticated attackers with access to the web interface via an HTTP POST request to certain URLs related to the ReGa core process.
Published: 2019-09-17T20:53:22.000Z
Updated: 2024-08-05T01:10:41.532Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14986 |
vulnerable | 2026-06-08 05:12:56.509025 |
Details available
eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn before 2.3.0 installed allow administrative operations by unauthenticated attackers with access to the web interface, because features such as File-Browser and Shell Command (as well as "Set root password") are exposed.
Published: 2019-08-13T19:19:44.000Z
Updated: 2024-08-05T00:34:53.132Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14984 |
vulnerable | 2026-06-08 05:12:56.498272 |
Details available
eQ-3 Homematic CCU2 and CCU3 with the XML-API through 1.2.0 AddOn installed allow Remote Code Execution by unauthenticated attackers with access to the web interface, because the undocumented addons/xmlapi/exec.cgi script uses CMD_EXEC to execute TCL code from a POST request.
Published: 2019-08-13T19:15:17.000Z
Updated: 2024-08-05T00:34:52.992Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.