Approved changes feed: RSS · Atom

cpe:2.3:o:eq-3:homematic_ccu3_firmware:3.47.18:*:*:*:*:*:*:*

part: o version: 3.47.18 update: *

VendorEq 3 (11715dba-e07d-5393-bfe8-7d5685450e28)
ProductHomematic Ccu3 Firmware (1df9f043-f131-568e-85ef-1a3aeb94f447)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-18939 vulnerable 2026-06-08 05:13:21.237193 Details available
eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the HM-Print AddOn through 1.2a installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the exec.cgi and exec1.cgi scripts, which execute TCL script content from an HTTP POST request.
Published: 2019-11-14T18:53:08.000Z
Updated: 2024-08-05T02:02:39.744Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18938 vulnerable 2026-06-08 05:13:13.095780 Details available
eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the E-Mail AddOn through 1.6.8.c installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the save.cgi script for payload upload and the testtcl.cgi script for its execution.
Published: 2019-11-14T18:52:33.000Z
Updated: 2024-08-05T02:02:39.909Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18937 vulnerable 2026-06-08 05:13:13.086263 Details available
eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the Script Parser AddOn through 1.8 installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the exec.cgi script, which executes TCL script content from an HTTP POST request.
Published: 2019-11-14T18:50:42.000Z
Updated: 2024-08-05T02:02:39.918Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.