CVE-2019-13030

eQ-3 Homematic CCU3 AddOn 'Mediola NEO Server for Homematic CCU3' prior to 2.4.5 allows uncontrolled admin access to start or stop the Node.js process…

published August 14, 2019

CVSS
—
EPSS
2%
Percentile
79.5
In the wild
Unconfirmed
What it is

eQ-3 Homematic CCU3 AddOn 'Mediola NEO Server for Homematic CCU3' prior to 2.4.5 allows uncontrolled admin access to start or stop the Node.js process, resulting in the ability to obtain mediola configuration details. This is related to improper access control for addons configuration pages and a missing check in rc.d/97NeoServer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01899 · 79.5th percentile
Published
2019-08-14T20:17Z
EPSS history
Timeline
  • 14 AUG 20:17Z
    eQ-3 Homematic CCU3 AddOn 'Mediola NEO Server for Homematic CCU3' prior to 2.4.5 allows uncontrolled admin access to start or stop the Node.js process…
    cvelistv5