CVE-2019-16199
Summary
| CVE | CVE-2019-16199 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-09-17 21:15:00 UTC |
| Updated | 2020-08-24 17:37:00 UTC |
| Description | eQ-3 Homematic CCU2 before 2.47.18 and CCU3 before 3.47.18 allow Remote Code Execution by unauthenticated attackers with access to the web interface via an HTTP POST request to certain URLs related to the ReGa core process. |
Risk And Classification
Problem Types: CWE-306
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Eq-3 | Homematic Ccu2 | - | All | All | All |
| Hardware | Eq-3 | Homematic Ccu2 | - | All | All | All |
| Operating System | Eq-3 | Homematic Ccu2 Firmware | All | All | All | All |
| Operating System | Eq-3 | Homematic Ccu2 Firmware | All | All | All | All |
| Hardware | Eq-3 | Homematic Ccu3 | - | All | All | All |
| Hardware | Eq-3 | Homematic Ccu3 | - | All | All | All |
| Operating System | Eq-3 | Homematic Ccu3 Firmware | All | All | All | All |
| Operating System | Eq-3 | Homematic Ccu3 Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| CVE-2019-16199 eQ-3 Homematic CCU2 prior 2.47.18 and CCU3 prior 3.47.18 allow Remote Code Execution by unauthenticated attackers with access to the web interface via a HTTP POST request to certain URLs related to the ReGa core process – psytester – Testing is my passion. Sharing knowledge is my contribution. | MISC | psytester.github.io | Exploit, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.