{"cvss":0.0,"datePublished":"2019-06-12T00:00:00Z","dateUpdated":"2019-06-12T00:00:00Z","description":"Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/write access and execute system commands on the device. This vulnerability can be exploited by unauthenticated attackers with access to the web interface.","dueDate":"","id":"CVE-2018-7297","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"homematic_central_control_unit_ccu2_firmware","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier Remote Code Execution","vendor":"eq-3"}