| Package | Affected versions | Patched versions |
|---|---|---|
| cux-daemon | ≥ 1.11a, ≤ 2.2.0 |
A Local File Inclusion (LFI) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to read sensitive files via a simple HTTP Request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free