Security Advisory
CVE-2018-7301
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
eQ-3 AG HomeMatic CCU2 2.29.22 devices have an open XML-RPC port without authentication. This can be exploited by sending arbitrary XML-RPC requests to control the attached BidCos devices.