CVE-2018-7299 - CERT CVE
ID CVE-2018-7299
Sažetak Remote Code Execution in the addon installation process in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows authenticated attackers to create or overwrite arbitrary files or install malicious software on the device.
Reference
CVSS
Base: 5.2
Impact: 6.4
Exploitability:5.1
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK LOW SINGLE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL PARTIAL PARTIAL
CVSS vektor AV:A/AC:L/Au:S/C:P/I:P/A:P
Zadnje važnije ažuriranje 03-10-2019 - 00:03
Objavljeno 22-02-2018 - 19:29