Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access and execute system commands on the device. This vulnerability can be exploited by unauthenticated attackers with access to the web interface.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Homematic_central_control_unit_ccu2_firmware | Eq-3 | * | 2.29.22 (including) |