CVE-2019-9582

moderate-risk
Published 2019-08-14

eQ-3 Homematic CCU2 outdated base software packages allows Denial of Service. CCU2 affected versions: 2.35.16, 2.41.5, 2.41.8, 2.41.9, 2.45.6, 2.45.7, 2.47.10, 2.47.12, 2.47.15.

Do I need to act?

-
0.17% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (9)

Affected Vendors

Eq-3

References (4)

Exploit https://github.com/psytester/psytester.github.io/blob/master/_posts/hacking_and_...
Exploit https://psytester.github.io/CVE-2019-9582/
Exploit https://github.com/psytester/psytester.github.io/blob/master/_posts/hacking_and_...
Exploit https://psytester.github.io/CVE-2019-9582/
42
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 1/34 · Minimal
Exposure 15/34 · Moderate