Vulnerability Details : CVE-2019-18937
Potential exploit
eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the Script Parser AddOn through 1.8 installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the exec.cgi script, which executes TCL script content from an HTTP POST request.
Vulnerability category: Execute code
Products affected by CVE-2019-18937
- cpe:2.3:o:eq-3:homematic_ccu2_firmware:2.47.20:*:*:*:*:*:*:*
- cpe:2.3:o:eq-3:homematic_ccu3_firmware:3.47.18:*:*:*:*:*:*:*
- cpe:2.3:a:scriptparser_project:scriptparser:1.8:*:*:*:*:*:*:*
- cpe:2.3:a:scriptparser_project:scriptparser:1.7:*:*:*:*:*:*:*
- cpe:2.3:a:scriptparser_project:scriptparser:1.6:*:*:*:*:*:*:*
- cpe:2.3:a:scriptparser_project:scriptparser:1.5:*:*:*:*:*:*:*
- cpe:2.3:a:scriptparser_project:scriptparser:1.4:*:*:*:*:*:*:*
- cpe:2.3:a:scriptparser_project:scriptparser:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:scriptparser_project:scriptparser:1.3:beta1:*:*:*:*:*:*
- cpe:2.3:a:scriptparser_project:scriptparser:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:scriptparser_project:scriptparser:1.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-18937
30.11%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 96 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-18937
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST | |
|
9.8
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
NIST |
CWE ids for CVE-2019-18937
-
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.Assigned by: nvd@nist.gov (Primary)
References for CVE-2019-18937
-
https://psytester.github.io/CVE-2019-18937/
CVE-2019-18937 eQ-3 Homematic AddOn 'ScriptParser' version 1.8 and prior on CCU2 and CCU3 allows Remote Code Execution by unauthenticated attackers with access to the web interface by usage of /addonsExploit;Third Party Advisory
Jump to