cve.bz

CVE-2019-15849

7.3 highEPSS 0.8%

High (7.3) in eq-3 homematic ccu3 firmware. EPSS 0.8% chance of exploitation in the next 30 days.

eQ-3 HomeMatic CCU3 firmware 3.41.11 allows session fixation. An attacker can create session IDs and send them to the victim. After the victim logs in to the session, the attacker can use that session. The attacker could create SSH logins after a valid session and easily compromise the system.

Severity

CVSS 3.1

7.3 high
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
EPSS
0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE
CWE-384
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON