Eq-3 Homematic Vulnerabilidades

Versão

2.29.0	6
2.29.1	6
2.29.2	6
3.47.15	2
3.41.11	2

Medidas

Official Fix	10
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	22

Explorabilidade

High	0
Functional	0
Proof-of-Concept	2
Unproven	0
Not Defined	30

Tipo de acesso

Not Defined	0
Physical	0
Local	0
Adjacent	2
Network	30

Autenticação

Not Defined	0
High	0
Low	8
None	24

Actividade do utilizador

Not Defined	0
Required	0
None	32

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	4
≤7	4
≤8	8
≤9	16
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	4
≤7	4
≤8	8
≤9	16
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	6
≤7	4
≤8	20
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	2
≤8	4
≤9	8
≤10	16

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Fabricante

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explorar 0 dia

<1k	0
<2k	28
<5k	4
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explorar hoje

<1k	32
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (80): 1.0, 1.1, 1.2, 2.0, 2.1, 2.2, 2.4, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.29, 2.29.1, 2.29.2, 2.29.22, 2.35.16, 2.41, 2.41.1, 2.41.2, 2.41.3, 2.41.4, 2.41.5, 2.41.6, 2.41.7, 2.41.8, 2.41.9, 2.45, 2.45.1, 2.45.2, 2.45.3, 2.45.4, 2.45.5, 2.45.6, 2.45.7, 2.47, 2.47.1, 2.47.2, 2.47.3, 2.47.4, 2.47.5, 2.47.6, 2.47.7, 2.47.8, 2.47.9, 2.47.11, 2.47.12, 2.47.13, 2.47.14, 2.47.15, 3.41.11, 3.43, 3.43.1, 3.43.2, 3.43.3, 3.43.4, 3.43.5, 3.43.6, 3.43.7, 3.43.8, 3.43.9, 3.43.11, 3.43.12, 3.43.13, 3.43.14, 3.43.15, 3.47, 3.47.1, 3.47.2, 3.47.3, 3.47.4, 3.47.5, 3.47.6, 3.47.7, 3.47.8, 3.47.9, 3.47.11, 3.47.12, 3.47.13, 3.47.14, 3.47.15

Publicado em	Base	Temp	Vulnerabilidade	0day	Hoje	Exp	Mas	CTI	CVE
23/07/2021	7.3	7.0	eQ-3 Homematic CCU2/Homematic CCU3 Remote Code Execution	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2021-33032
15/05/2020	8.5	8.5	eQ-3 Homematic CCU2/Homematic CCU3 JSON API direitos alargados	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-12834
14/11/2019	8.5	8.5	eQ-3 Homematic CCU2/Homematic CCU3 Web Interface exec.cgi direitos alargados	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2019-18939
14/11/2019	8.5	8.5	eQ-3 Homematic CCU2/Homematic CCU3 Web Interface save.cgi direitos alargados	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2019-18938
14/11/2019	8.5	8.5	eQ-3 Homematic CCU2/Homematic CCU3 Web Interface exec.cgi direitos alargados	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2019-18937
17/10/2019	7.5	7.5	eQ-3 Homematic CCU3 ReGa.runScript direitos alargados	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2019-15850
17/10/2019	6.8	6.8	eQ-3 Homematic CCU3 Fraca autenticação	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2019-15849
17/10/2019	5.4	5.4	eQ-3 Homematic CCU2 CUx-Daemon Divulgação de Informação	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-14424
17/10/2019	8.8	8.8	eQ-3 Homematic CCU2 CUx-Daemon direitos alargados	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-14423
17/09/2019	8.5	8.4	eQ-3 Homematic CCU2/Homematic CCU3 Web Interface Fraca autenticação	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2019-16199