CVE-2018-7300
35Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 31%
from disclosure to weapon36 days
Published on NVDFeb 22
1st PoC+36d
exploitation probability
31%top 2% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Directory Traversal / Arbitrary File Write / Remote Code Execution in the User.setLanguage method in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to write arbitrary files to the device's filesystem. This vulnerability can be exploited by unauthenticated attackers with access to the web interface.
Affected products
n/a · n/apublic PoCs found — 2
cve_referencewww.exploit-db.com/exploits/44361/unverifiedexploitdbwww.exploit-db.com/exploits/44361unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.