CVE-2018-7298

In /usr/local/etc/config/addons/mh/loopupd.sh on eQ-3 AG HomeMatic CCU2 2.29.22 devices, software update packages are downloaded via the HTTP protocol, which…

published February 22, 2018

CVSS
—
EPSS
1%
Percentile
55.8
In the wild
Unconfirmed
What it is

In /usr/local/etc/config/addons/mh/loopupd.sh on eQ-3 AG HomeMatic CCU2 2.29.22 devices, software update packages are downloaded via the HTTP protocol, which does not provide any cryptographic protection of the downloaded contents. An attacker with a privileged network position (which could be obtained via DNS spoofing of www.meine-homematic.de or other approaches) can exploit this issue in order to provide arbitrary malicious firmware updates to the CCU2. This can result in a full system compromise.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00790 · 55.8th percentile
Published
2018-02-22T19:00Z
EPSS history
Timeline
  • 22 FEB 19:00Z
    In /usr/local/etc/config/addons/mh/loopupd.sh on eQ-3 AG HomeMatic CCU2 2.29.22 devices, software update packages are downloaded via the HTTP protocol, which…
    cvelistv5