Researchers
Back
Lukas Zorn
Researcher from
SVA System Vertrieb Alexander GmbH
#39714
of 60,574
7.5
Total CVSS
Vulnerabilities
·
1
PT-2019-19825
2019-05-13
7.5
CVE-2019-9727
Eq 3 Ag
Homematic Ccu3
The issue allows unauthenticated remote attackers to disclose password hashes of GUI users through the User.getUserPWD method. This can be exploited by attackers with access to the web interface.