CVE:CVE-2019-18937
CNNVD:CNNVD-201911-985
eQ-3 Homematic CCU3和eQ-3 HomeMatic CCU2都是德国eQ-3公司的一款智能家居系统的中央控制单元。
eQ-3 Homematic CCU2 2.47.20版本和CCU3 3.47.18版本中的Script Parser AddOn 1.8及之前版本存在安全漏洞。攻击者可利用该漏洞执行代码。
solution:Upgrade scriptparser_project scriptparser to a higher version than 1.8,1.7,1.6,1.5,1.4,1.3,1.3:beta1,1.2,1.0,and avoid the version 1.8,1.7,1.6,1.5,1.4,1.3,1.3:beta1,1.2,1.0; Upgrade eq-3 homematic_ccu2_firmware to a higher version than 2.47.20,and avoid the version 2.47.20; Upgrade eq-3 homematic_ccu3_firmware to a higher version than 3.47.18,and avoid the version 3.47.18