CVE:CVE-2019-18938
CNNVD:CNNVD-201911-987
eQ-3 Homematic CCU3和eQ-3 HomeMatic CCU2都是德国eQ-3公司的一款智能家居系统的中央控制单元。
eQ-3 Homematic CCU2 2.47.20版本和CCU3 3.47.18版本中的E-Mail AddOn 1.6.8.c及之前版本存在安全漏洞。攻击者可利用该漏洞执行代码。
solution:Upgrade hm_email_project hm_email to a higher version than 1.6.8c,1.6.8b,1.6.8a,1.6.7c,1.6.7b,1.6.7a,1.6.7,1.6.6,1.6.5,1.6.4,1.6.3,1.6.2,1.6.0,1.6.8,and avoid the version 1.6.8c,1.6.8b,1.6.8a,1.6.7c,1.6.7b,1.6.7a,1.6.7,1.6.6,1.6.5,1.6.4,1.6.3,1.6.2,1.6.0,1.6.8; Upgrade eq-3 homematic_ccu2_firmware to a higher version than 2.24.20,and avoid the version 2.24.20; Upgrade eq-3 homematic_ccu3_firmware to a higher version than 3.47.18,and avoid the version 3.47.18