CVE-2018-7297

Critical · 9.8

CVSS

9.8

EPSS

64.3%

Published

Feb 22, 2018

CISA due date

—

The record

Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access and execute system commands on the device. This vulnerability can be exploited by unauthenticated attackers with access to the web interface.

Affected packages

Ecosystem	Package	Introduced	Fixed