CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10120

On eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.16, automatic login configuration (aka setAutoLogin) can be achieved by continuing to use a session ID after a logout, aka HMCCU-154.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 41.7%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2019-10120

Eq-3 » Ccu2 » Version: N/A

cpe:2.3:h:eq-3:ccu2:-
Eq-3 » Ccu3 » Version: N/A

cpe:2.3:h:eq-3:ccu3:-
Eq-3 » Ccu2 Firmware » Version: N/A

cpe:2.3:o:eq-3:ccu2_firmware:-
Eq-3 » Ccu2 Firmware » Version: 2.11.6

cpe:2.3:o:eq-3:ccu2_firmware:2.11.6
Eq-3 » Ccu2 Firmware » Version: 2.11.9

cpe:2.3:o:eq-3:ccu2_firmware:2.11.9
Eq-3 » Ccu2 Firmware » Version: 2.13.7

cpe:2.3:o:eq-3:ccu2_firmware:2.13.7
Eq-3 » Ccu2 Firmware » Version: 2.15.2

cpe:2.3:o:eq-3:ccu2_firmware:2.15.2
Eq-3 » Ccu2 Firmware » Version: 2.15.5

cpe:2.3:o:eq-3:ccu2_firmware:2.15.5
Eq-3 » Ccu2 Firmware » Version: 2.17.14

cpe:2.3:o:eq-3:ccu2_firmware:2.17.14
Eq-3 » Ccu2 Firmware » Version: 2.17.15

cpe:2.3:o:eq-3:ccu2_firmware:2.17.15
Eq-3 » Ccu2 Firmware » Version: 2.17.16

cpe:2.3:o:eq-3:ccu2_firmware:2.17.16
Eq-3 » Ccu2 Firmware » Version: 2.19.9

cpe:2.3:o:eq-3:ccu2_firmware:2.19.9
Eq-3 » Ccu2 Firmware » Version: 2.21.10

cpe:2.3:o:eq-3:ccu2_firmware:2.21.10
Eq-3 » Ccu2 Firmware » Version: 2.25.12

cpe:2.3:o:eq-3:ccu2_firmware:2.25.12
Eq-3 » Ccu2 Firmware » Version: 2.25.14

cpe:2.3:o:eq-3:ccu2_firmware:2.25.14
Eq-3 » Ccu2 Firmware » Version: 2.25.15

cpe:2.3:o:eq-3:ccu2_firmware:2.25.15
Eq-3 » Ccu2 Firmware » Version: 2.27.7

cpe:2.3:o:eq-3:ccu2_firmware:2.27.7
Eq-3 » Ccu2 Firmware » Version: 2.27.8

cpe:2.3:o:eq-3:ccu2_firmware:2.27.8
Eq-3 » Ccu2 Firmware » Version: 2.29.18

cpe:2.3:o:eq-3:ccu2_firmware:2.29.18
Eq-3 » Ccu2 Firmware » Version: 2.29.19

cpe:2.3:o:eq-3:ccu2_firmware:2.29.19
Eq-3 » Ccu2 Firmware » Version: 2.29.22

cpe:2.3:o:eq-3:ccu2_firmware:2.29.22
Eq-3 » Ccu2 Firmware » Version: 2.29.23

cpe:2.3:o:eq-3:ccu2_firmware:2.29.23
Eq-3 » Ccu2 Firmware » Version: 2.3.17

cpe:2.3:o:eq-3:ccu2_firmware:2.3.17
Eq-3 » Ccu2 Firmware » Version: 2.3.18

cpe:2.3:o:eq-3:ccu2_firmware:2.3.18
Eq-3 » Ccu2 Firmware » Version: 2.31.23

cpe:2.3:o:eq-3:ccu2_firmware:2.31.23
Eq-3 » Ccu2 Firmware » Version: 2.31.25

cpe:2.3:o:eq-3:ccu2_firmware:2.31.25
Eq-3 » Ccu2 Firmware » Version: 2.35.15

cpe:2.3:o:eq-3:ccu2_firmware:2.35.15
Eq-3 » Ccu2 Firmware » Version: 2.35.16

cpe:2.3:o:eq-3:ccu2_firmware:2.35.16
Eq-3 » Ccu2 Firmware » Version: 2.41.5

cpe:2.3:o:eq-3:ccu2_firmware:2.41.5
Eq-3 » Ccu2 Firmware » Version: 2.5.4

cpe:2.3:o:eq-3:ccu2_firmware:2.5.4
Eq-3 » Ccu2 Firmware » Version: 2.7.16

cpe:2.3:o:eq-3:ccu2_firmware:2.7.16
Eq-3 » Ccu2 Firmware » Version: 2.7.17

cpe:2.3:o:eq-3:ccu2_firmware:2.7.17
Eq-3 » Ccu2 Firmware » Version: 2.7.8

cpe:2.3:o:eq-3:ccu2_firmware:2.7.8
Eq-3 » Ccu2 Firmware » Version: 2.9.10

cpe:2.3:o:eq-3:ccu2_firmware:2.9.10
Eq-3 » Ccu2 Firmware » Version: 2.9.12

cpe:2.3:o:eq-3:ccu2_firmware:2.9.12
Eq-3 » Ccu3 Firmware » Version: 2.15.5

cpe:2.3:o:eq-3:ccu3_firmware:2.15.5
Eq-3 » Ccu3 Firmware » Version: 2.17.15

cpe:2.3:o:eq-3:ccu3_firmware:2.17.15
Eq-3 » Ccu3 Firmware » Version: 2.19.9

cpe:2.3:o:eq-3:ccu3_firmware:2.19.9
Eq-3 » Ccu3 Firmware » Version: 2.19.9-1

cpe:2.3:o:eq-3:ccu3_firmware:2.19.9-1
Eq-3 » Ccu3 Firmware » Version: 2.21.10

cpe:2.3:o:eq-3:ccu3_firmware:2.21.10
Eq-3 » Ccu3 Firmware » Version: 2.25.12

cpe:2.3:o:eq-3:ccu3_firmware:2.25.12
Eq-3 » Ccu3 Firmware » Version: 2.25.15

cpe:2.3:o:eq-3:ccu3_firmware:2.25.15
Eq-3 » Ccu3 Firmware » Version: 2.27.7

cpe:2.3:o:eq-3:ccu3_firmware:2.27.7
Eq-3 » Ccu3 Firmware » Version: 2.27.8

cpe:2.3:o:eq-3:ccu3_firmware:2.27.8
Eq-3 » Ccu3 Firmware » Version: 2.27.8-1

cpe:2.3:o:eq-3:ccu3_firmware:2.27.8-1
Eq-3 » Ccu3 Firmware » Version: 2.29.22

cpe:2.3:o:eq-3:ccu3_firmware:2.29.22
Eq-3 » Ccu3 Firmware » Version: 2.29.22-1

cpe:2.3:o:eq-3:ccu3_firmware:2.29.22-1
Eq-3 » Ccu3 Firmware » Version: 2.31.23

cpe:2.3:o:eq-3:ccu3_firmware:2.31.23
Eq-3 » Ccu3 Firmware » Version: 2.31.25

cpe:2.3:o:eq-3:ccu3_firmware:2.31.25
Eq-3 » Ccu3 Firmware » Version: 2.35.16

cpe:2.3:o:eq-3:ccu3_firmware:2.35.16
Eq-3 » Ccu3 Firmware » Version: 3.37.8

cpe:2.3:o:eq-3:ccu3_firmware:3.37.8
Eq-3 » Ccu3 Firmware » Version: 3.41.11

cpe:2.3:o:eq-3:ccu3_firmware:3.41.11
Eq-3 » Ccu3 Firmware » Version: 3.41.7

cpe:2.3:o:eq-3:ccu3_firmware:3.41.7
Eq-3 » Ccu3 Firmware » Version: 3.43.15

cpe:2.3:o:eq-3:ccu3_firmware:3.43.15

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10120

Products

Pricing

Contact Us