CVE:CVE-2019-14423
CNNVD:CNNVD-201910-1182
使用2.35.16版本至2.45.6版本固件的eQ-3 Homematic CCU中的addon CUx-Daemon 1.11a版本中存在安全漏洞。远程攻击者可借助特制的HTTP请求利用该漏洞执行系统命令。
solution:Upgrade eq-3 cux-daemon to a higher version than 2.2.0,and avoid the version [1.11a,2.2.0]; Upgrade eq-3 ccu2_firmware to a higher version than 2.45.6,and avoid the version [2.35.16,2.45.6]