PT-2019-11585
CVE-2019-10122
·
Published
2019-07-10
·
Updated
2021-07-21
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
eQ-3 HomeMatic CCU2 versions prior to 2.41.9
eQ-3 HomeMatic CCU3 versions prior to 3.43.16
Description:
The issue is related to buffer overflows in the ReGa ise GmbH HTTP-Server 2.0 component. This may lead to remote code execution.
Recommendations:
For eQ-3 HomeMatic CCU2 versions prior to 2.41.9, update to version 2.41.9 or later.
For eQ-3 HomeMatic CCU3 versions prior to 3.43.16, update to version 3.43.16 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾