CVE-2019-18937

Published: Nov 14, 2019Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the Script Parser AddOn through 1.8 installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the exec.cgi script, which executes TCL script content from an HTTP POST request.

Affected (11)

Products: Scriptparser Project: Scriptparser · Eq 3: Homematic Ccu2 Firmware, Homematic Ccu3 Firmware

Scriptparser Project

1 product

Scriptparser

Eq 3

2 products

Homematic Ccu2 Firmware

Homematic Ccu3 Firmware

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Scriptparser Project Scriptparser	Version 1.8

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Scriptparser Project Scriptparser	Version 1.7

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Eq 3 Homematic Ccu2 Firmware	Version 2.47.20

Running on/with	Platform Versions
Eq 3 Homematic Ccu2	All versions

Configuration L

1 vulnerable

Vulnerable Software	Affected Versions
Scriptparser Project Scriptparser	Version 1.6

Configuration M

1 vulnerable

Vulnerable Software	Affected Versions
Scriptparser Project Scriptparser	Version 1.5

Configuration N

1 vulnerable

Vulnerable Software	Affected Versions
Scriptparser Project Scriptparser	Version 1.4

Configuration O

1 vulnerable

Vulnerable Software	Affected Versions
Scriptparser Project Scriptparser	Version 1.3

Configuration P

1 vulnerable

Vulnerable Software	Affected Versions
Scriptparser Project Scriptparser	Version 1.3 beta1

Configuration Q

1 vulnerable

Vulnerable Software	Affected Versions
Scriptparser Project Scriptparser	Version 1.2

Configuration R

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Eq 3 Homematic Ccu3 Firmware	Version 3.47.18
Scriptparser Project Scriptparser	Version 1.0

Running on/with	Platform Versions
Eq 3 Homematic Ccu3	All versions

Related CWEs

CWE-306

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (2)

https://psytester.github.io/CVE-2019-18937/

Source: cve@mitre.org

ExploitThird Party Advisory

https://psytester.github.io/CVE-2019-18937/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.