1. Home
  2. CVE Database
  3. CVE-2019-9726
HIGH · 7.5

CVE-2019-9726

Directory Traversal / Arbitrary File Read in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read arbitrary files of the device's filesystem. This vulnerability can be exploited ...

Vulnerability Description

Directory Traversal / Arbitrary File Read in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read arbitrary files of the device's filesystem. This vulnerability can be exploited by unauthenticated attackers with access to the web interface.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
Eq-3Ccu3 Firmware<= 3.43.15
Eq-3Ccu3-

Related Weaknesses (CWE)

CWE-22

References

FAQ

What is CVE-2019-9726?

CVE-2019-9726 is a vulnerability with a CVSS score of 7.5 (HIGH). Directory Traversal / Arbitrary File Read in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read arbitrary files of the device's filesystem. This vulnerability can be exploited ...

How severe is CVE-2019-9726?

CVE-2019-9726 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-9726?

Check the references section above for vendor advisories and patch information. Affected products include: Eq-3 Ccu3 Firmware, Eq-3 Ccu3.