CVE-2019-18938

Published Nov 14, 2019 CVSS 3.1 · 9.8 Critical EPSS 33.8% KEV · Not listed
Description
eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the E-Mail AddOn through 1.6.8.c installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the save.cgi script for payload upload and the testtcl.cgi script for its execution.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 5, 2024, 2:02 AM
Reserved
Nov 13, 2019, 12:00 AM
Status
Modified
Published
Nov 14, 2019, 7:15 PM
Modified
Jun 17, 2026, 2:25 AM