CVE-2019-14474

eQ-3 Homematic CCU3 3.47.15 and prior has Improper Input Validation in function 'Call()' of ReGa core logic process, resulting in the ability to start a Denial…

published August 7, 2019

CVSS
—
EPSS
2%
Percentile
79.7
In the wild
Unconfirmed
What it is

eQ-3 Homematic CCU3 3.47.15 and prior has Improper Input Validation in function 'Call()' of ReGa core logic process, resulting in the ability to start a Denial of Service. Due to Improper Authorization an attacker can obtain a session ID from CVE-2019-9583 or a valid guest/user/admin account can start this attack too.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01917 · 79.7th percentile
Published
2019-08-07T17:12Z
EPSS history
Timeline
  • 07 AUG 17:12Z
    eQ-3 Homematic CCU3 3.47.15 and prior has Improper Input Validation in function 'Call()' of ReGa core logic process, resulting in the ability to start a Denial…
    cvelistv5