Strix
26.1K

CVE-2019-14985

UnknownEPSS 11.32%

Last modified

CVE-2019-14985 is a vulnerability of currently unknown severity. eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn installed allow Remote Code Execution by unauthenticated attackers with access to the web interface, because this interface can access the CMD_EXEC virtual device type 28.. EPSS estimates a 11.32% chance of exploitation in the next 30 days.

Description

eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn installed allow Remote Code Execution by unauthenticated attackers with access to the web interface, because this interface can access the CMD_EXEC virtual device type 28.

Metrics

EPSS Probability
11.32%

95.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
Eq-3Homematic Ccu2 Firmware2.35.16
Eq-3Homematic Ccu2 Firmware2.41.5
Eq-3Homematic Ccu2 Firmware2.41.8
Eq-3Homematic Ccu2 Firmware2.41.9
Eq-3Homematic Ccu2 Firmware2.45.6
Eq-3Homematic Ccu2 Firmware2.45.7
Eq-3Homematic Ccu2 Firmware2.47.10
Eq-3Homematic Ccu2 Firmware2.47.12
Eq-3Homematic Ccu2 Firmware2.47.15
Eq-3Homematic Ccu3 Firmware3.41.11
Eq-3Homematic Ccu3 Firmware3.43.16
Eq-3Homematic Ccu3 Firmware3.45.5
Eq-3Homematic Ccu3 Firmware3.45.7
Eq-3Homematic Ccu3 Firmware3.47.10
Eq-3Homematic Ccu3 Firmware3.47.15

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2019-14985?
eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn installed allow Remote Code Execution by unauthenticated attackers with access to the web interface, because this interface can access the CMD_EXEC virtual device type 28.
How severe is CVE-2019-14985?
Severity scoring for CVE-2019-14985 is pending analysis. The EPSS model estimates a 11.32% probability of exploitation in the next 30 days.
How do I fix CVE-2019-14985?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-14985?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST