Back to search
CVE-2019-14474
Published: Aug 7, 2019
Modified: Aug 5, 2024
PUBLISHED
Description
eQ-3 Homematic CCU3 3.47.15 and prior has Improper Input Validation in function 'Call()' of ReGa core logic process, resulting in the ability to start a Denial of Service. Due to Improper Authorization an attacker can obtain a session ID from CVE-2019-9583 or a valid guest/user/admin account can start this attack too.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://psytester.github.io/CVE-2019-14474
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now