virus logo Intrusion Prevention

HomeMatic.CCU2.CGI.Remote.Code.Execution

description-logoDescription

This indicates an attack attempt to exploit a Code Injection Vulnerability in Homematic.
The vulnerability is due to an input validation error when parsing a crafted HTTP request via Common Gateway Interface (CGI) script. A remote attacker could exploit this to execute arbitrary code within the context of target application, via a crafted HTTP request.

affected-products-logoAffected Products

eQ-3 AG Homematic CCU2 below 2.35.16

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Apply the most recent upgrade or patch from the vendor
https://www.eq-3.de/service/downloads.html?id=285

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2020-03-11 15.794 Sig Added
2018-10-24 13.478 Default_action:pass:drop

References

https://www.exploit-db.com/exploits/45052/
ID 46490
Created Jul 25, 2018
Updated Mar 10, 2020
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
CVE ID
Default Action drop
Active
Affected OS Other
Affected App Other