homematic central control unit ccu2 firmware vulnerabilities and fixes

Recent CVEs affecting homematic central control unit ccu2 firmware, with upgrade or downgrade steps. 5 tracked.

Also searched as: homematiccentralcontrolunitccu2firmware.

homematic central control unit ccu2 firmware has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 3. Most recent: 2018-02-22. Highest priority: CVE-2018-7297 (score 69/100).

• CVE-2018-7301 CRITICAL 9.8 MITIGATE eQ-3 AG HomeMatic CCU2 2.29.22 devices have an open XML-RPC port without authentication
• CVE-2018-7299 HIGH 8.0 UPGRADE Remote Code Execution in the addon installation process in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows au
• CVE-2018-7298 HIGH 8.1 MITIGATE In /usr/local/etc/config/addons/mh/loopupd.sh on eQ-3 AG HomeMatic CCU2 2.29.22 devices, software update packa
• CVE-2018-7297 CRITICAL 9.8 UPGRADE Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote
• CVE-2018-7296 MEDIUM 5.3 UPGRADE Directory Traversal / Arbitrary File Read in User.getLanguage method in eQ-3 AG Homematic CCU2 2.29.2 and earl

FAQ

How do I fix homematic central control unit ccu2 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is homematic central control unit ccu2 firmware being exploited right now?

None of the tracked homematic central control unit ccu2 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which homematic central control unit ccu2 firmware CVE should I patch first?

CVE-2018-7297 currently ranks highest (69/100): Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote.

RSS feed for homematic central control unit ccu2 firmware · ← Back to latest CVEs