CVE-2019-14423 - A Remote Code Execution (RCE) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to execute system commands as root remotely via a simple HTTP request

Back Back to CVE browser

HIGH

A Remote Code Execution (RCE) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to execute system commands as root remotely via a simple HTTP request

Published Oct 17, 2019

8.8

HIGH

CVSS 3.1

EPSS 19.90%

Description

A Remote Code Execution (RCE) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to execute system commands as root remotely via a simple HTTP request.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5626
Advisory
https://noskill1337.github.io/homematic-with-cux-daemon-remote-code-execution
x_refsource_MISCExploitMitigationThird Party Advisory
https://www.eq-3.com/products/homematic.html
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5626		Advisory
https://noskill1337.github.io/homematic-with-cux-daemon-remote-code-execution		x_refsource_MISCExploitMitigationThird Party Advisory
https://www.eq-3.com/products/homematic.html		x_refsource_MISCVendor Advisory