Search vulnerabilities

Results 2

Export CSV
CVE-2019-14424

A Local File Inclusion (LFI) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to read sensitive files via a simple HTTP Request.

CVSS 3.1 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
CVE-2019-14423

A Remote Code Execution (RCE) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to execute system commands as root remotely via a simple HTTP request.

CVSS 3.1 · 8.8 High EPSS 19.9% KEV · Not listed
Vendors