PT-2019-13689
CVE-2019-14423
·
Publicado
2019-10-17
·
Atualizado
2021-07-21
Descrição por
CVSS 2.0
9.0
AltaMétricasAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
eQ-3 Homematic CCU-Firmware versions 2.35.16 through 2.45.6
Description
A Remote Code Execution issue in the addon CUx-Daemon allows remote authenticated attackers to execute system commands as root remotely via a simple HTTP request.
Recommendations
For versions 2.35.16 through 2.45.6, consider disabling the CUx-Daemon addon until a patch is available to prevent remote code execution.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾