CVE-2019-18939

    Dashboard / Vulnerabilities / CVE-2019-18939

    CVE-2019-18939

    Published: 14 Nov 2019Last Modified: 8 Jul 2026

    Summary:

    Details: eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the HM-Print AddOn through 1.2a installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the exec.cgi and exec1.cgi scripts, which execute TCL script content from an HTTP POST request.

    References: https://psytester.github.io/CVE-2019-18939/

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -92312b46211841ddf4ae42edf59dd007b0282539

    Affected versions

    1.2

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2019-18939 | CVE-DB