CVE:CVE-2019-14985
CNNVD:CNNVD-201908-912
eQ-3 Homematic CCU3和eQ-3 HomeMatic CCU2都是德国eQ-3公司的一款智能家居系统的中央控制单元。
eQ-3 Homematic CCU2和CCU3中存在授权问题漏洞。该漏洞源于网络系统或产品中缺少身份验证措施或身份验证强度不足。
solution:Upgrade eq-3 homematic_ccu2_firmware to a higher version than 2.35.16,2.41.5,2.41.8,2.41.9,2.45.6,2.45.7,2.47.10,2.47.12,2.47.15,and avoid the version 2.35.16,2.41.5,2.41.8,2.41.9,2.45.6,2.45.7,2.47.10,2.47.12,2.47.15; Upgrade eq-3 homematic_ccu3_firmware to a higher version than 3.41.11,3.43.16,3.45.5,3.45.7,3.47.10,3.47.15,and avoid the version 3.41.11,3.43.16,3.45.5,3.45.7,3.47.10,3.47.15