Approved changes feed: RSS · Atom

cpe:2.3:o:eq-3:homematic_ccu3_firmware:3.47.10:*:*:*:*:*:*:*

part: o version: 3.47.10 update: *

VendorEq 3 (11715dba-e07d-5393-bfe8-7d5685450e28)
ProductHomematic Ccu3 Firmware (1df9f043-f131-568e-85ef-1a3aeb94f447)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-9583 vulnerable 2026-06-08 05:14:25.764048 Details available
eQ-3 Homematic CCU2 and CCU3 obtain session IDs without login. This allows a Denial of Service and is a starting point for other attacks. Affected versions for CCU2: 2.35.16, 2.41.5, 2.41.8, 2.41.9, 2.45.6, 2.45.7, 2.47.10, 2.47.12, 2.47.15. Affected versions for CCU3: 3.41.11, 3.43.16, 3.45.5, 3.45.7, 3.47.10, 3.47.15.
Published: 2019-08-14T19:47:54.000Z
Updated: 2024-08-04T21:54:44.498Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14985 vulnerable 2026-06-08 05:12:56.507930 Details available
eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn installed allow Remote Code Execution by unauthenticated attackers with access to the web interface, because this interface can access the CMD_EXEC virtual device type 28.
Published: 2019-08-13T19:17:52.000Z
Updated: 2024-08-05T00:34:52.995Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.