Approved changes feed: RSS · Atom

cpe:2.3:o:eq-3:homematic_ccu2_firmware:2.24.20:*:*:*:*:*:*:*

part: o version: 2.24.20 update: *

VendorEq 3 (11715dba-e07d-5393-bfe8-7d5685450e28)
ProductHomematic Ccu2 Firmware (f1b8770b-f0a7-53a8-9dd7-c0e69dbabb77)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-18938 vulnerable 2026-06-08 05:13:13.095704 Details available
eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the E-Mail AddOn through 1.6.8.c installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the save.cgi script for payload upload and the testtcl.cgi script for its execution.
Published: 2019-11-14T18:52:33.000Z
Updated: 2024-08-05T02:02:39.909Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.