CVE-2018-7300
Directory Traversal / Arbitrary File Write / Remote Code Execution in the User.setLanguage method in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to write arbitrary files to the device's filesystem.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 30.6%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Directory Traversal / Arbitrary File Write / Remote Code Execution in the User.setLanguage method in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to write arbitrary files to the device's filesystem. This vulnerability can be exploited by unauthenticated attackers with access to the web interface.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 30.59% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- eq-3/homematic ccu2 firmware
- Source
- cve@mitre.org
References
- http://atomic111.github.io/article/homematic-ccu2-filewriteThird Party Advisory
- https://www.exploit-db.com/exploits/44361/Third Party Advisory, VDB Entry
- http://atomic111.github.io/article/homematic-ccu2-filewriteThird Party Advisory
- https://www.exploit-db.com/exploits/44361/Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.