PT-2019-11583
CVE-2019-10120
·
Published
2019-07-10
·
Updated
2019-07-17
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
eQ-3 HomeMatic CCU2 versions prior to 2.41.8
eQ-3 HomeMatic CCU3 versions prior to 3.43.16
Description:
The issue allows automatic login configuration to be achieved by continuing to use a session ID after a logout.
Recommendations:
For eQ-3 HomeMatic CCU2 versions prior to 2.41.8, update to version 2.41.8 or later.
For eQ-3 HomeMatic CCU3 versions prior to 3.43.16, update to version 3.43.16 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾