CVE-2021-33032

<= 2.57.5

A Remote Code Execution (RCE) vulnerability in the WebUI component of the eQ-3 HomeMatic CCU2 firmware up to and including version

10.0CRITICAL

CVE-2020-12834

<= 2.51.6

eQ-3 Homematic Central Control Unit (CCU)2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSON API Meth

9.8CRITICAL

CVE-2019-18939

all versions

eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the HM-Print AddOn through 1.2a installed allow Remote Code Execution by unauthe

9.8CRITICAL

CVE-2019-18938

all versions

eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the E-Mail AddOn through 1.6.8.c installed allow Remote Code Execution by unauth

9.8CRITICAL

CVE-2019-18937

all versions

eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the Script Parser AddOn through 1.8 installed allow Remote Code Execution by una

9.8CRITICAL

CVE-2019-16199

< 2.47.18

eQ-3 Homematic CCU2 before 2.47.18 and CCU3 before 3.47.18 allow Remote Code Execution by unauthenticated attackers with access to

9.8CRITICAL

CVE-2019-9585

< 2.47.10

eQ-3 Homematic CCU2 prior to 2.47.10 and CCU3 prior to 3.47.10 JSON API has Improper Access Control for Interface.*Metadata rela

9.8CRITICAL

CVE-2019-9584

<= 2.47.15

eQ-3 Homematic AddOn 'CloudMatic' on CCU2 and CCU3 allows uncontrolled admin access, resulting in the ability to obtain VPN profil

9.8CRITICAL

CVE-2019-9583

all versions

eQ-3 Homematic CCU2 and CCU3 obtain session IDs without login. This allows a Denial of Service and is a starting point for other a

8.2HIGH

CVE-2019-9582

all versions

eQ-3 Homematic CCU2 outdated base software packages allows Denial of Service. CCU2 affected versions: 2.35.16, 2.41.5, 2.41.8, 2.4

7.5HIGH

CVE-2019-14986

< 2.3.0

eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn before 2.3.0 installed allow administrative operations by unauthenticated attacke

8.1HIGH

CVE-2019-14985

all versions

eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn installed allow Remote Code Execution by unauthenticated attackers with access to

9.8CRITICAL

CVE-2019-14984

<= 1.2.0

eQ-3 Homematic CCU2 and CCU3 with the XML-API through 1.2.0 AddOn installed allow Remote Code Execution by unauthenticated attacke

8.1HIGH

CVE-2018-7300

<= 2.29.22

Directory Traversal / Arbitrary File Write / Remote Code Execution in the User.setLanguage method in eQ-3 AG Homematic CCU2 2.29.2

9.8CRITICAL