Security Advisory
CVE-2019-9726
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Directory Traversal / Arbitrary File Read in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read arbitrary files of the devices filesystem. This vulnerability can be exploited by unauthenticated attackers with access to the web interface.