Approved changes feed: RSS · Atom

cpe:2.3:a:hm_email_project:hm_email:1.6.4:*:*:*:*:*:*:*

part: a version: 1.6.4 update: *

VendorHm Email Project (bf18ee44-4b8d-5b9f-b698-5ac894be9958)
ProductHm Email (2349deb9-2436-5332-a787-1e562d4aed16)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/homematic-community/hm_email purl2cpe 2026-06-01 10:13:12.758095

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-18938 vulnerable 2026-06-08 05:13:13.100717 Details available
eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the E-Mail AddOn through 1.6.8.c installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the save.cgi script for payload upload and the testtcl.cgi script for its execution.
Published: 2019-11-14T18:52:33.000Z
Updated: 2024-08-05T02:02:39.909Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.