{"id":"CVE-2019-18938","details":"eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the E-Mail AddOn through 1.6.8.c installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the save.cgi script for payload upload and the testtcl.cgi script for its execution.","modified":"2026-08-27T03:48:22.278393617Z","published":"2019-11-14T19:15:13.347Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:eq-3:homematic_ccu2_firmware:2.24.20:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.24.20"},{"last_affected":"2.24.20"},{"introduced":"2.24.20"},{"last_affected":"2.24.20"},{"introduced":"2.24.20"},{"last_affected":"2.24.20"},{"introduced":"2.24.20"},{"last_affected":"2.24.20"},{"introduced":"2.24.20"},{"last_affected":"2.24.20"},{"introduced":"2.24.20"},{"last_affected":"2.24.20"},{"introduced":"2.24.20"},{"last_affected":"2.24.20"},{"introduced":"2.24.20"},{"last_affected":"2.24.20"},{"introduced":"2.24.20"},{"last_affected":"2.24.20"},{"introduced":"2.24.20"},{"last_affected":"2.24.20"},{"introduced":"2.24.20"},{"last_affected":"2.24.20"},{"introduced":"2.24.20"},{"last_affected":"2.24.20"},{"introduced":"2.24.20"},{"last_affected":"2.24.20"},{"introduced":"2.24.20"},{"last_affected":"2.24.20"}],"source":"CPE_STRING","vendor_product":"eq-3:homematic_ccu2_firmware"},{"vendor_product":"eq-3:homematic_ccu3_firmware","cpes":["cpe:2.3:o:eq-3:homematic_ccu3_firmware:3.47.18:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"3.47.18"},{"last_affected":"3.47.18"},{"introduced":"3.47.18"},{"last_affected":"3.47.18"},{"introduced":"3.47.18"},{"last_affected":"3.47.18"},{"introduced":"3.47.18"},{"last_affected":"3.47.18"},{"introduced":"3.47.18"},{"last_affected":"3.47.18"},{"introduced":"3.47.18"},{"last_affected":"3.47.18"},{"introduced":"3.47.18"},{"last_affected":"3.47.18"},{"introduced":"3.47.18"},{"last_affected":"3.47.18"},{"introduced":"3.47.18"},{"last_affected":"3.47.18"},{"introduced":"3.47.18"},{"last_affected":"3.47.18"},{"introduced":"3.47.18"},{"last_affected":"3.47.18"},{"introduced":"3.47.18"},{"last_affected":"3.47.18"},{"introduced":"3.47.18"},{"last_affected":"3.47.18"},{"introduced":"3.47.18"},{"last_affected":"3.47.18"}],"source":"CPE_STRING"}]},"references":[{"type":"EVIDENCE","url":"https://psytester.github.io/CVE-2019-18938/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/homematic-community/hm_email","events":[{"introduced":"b2327178341aff5bbc264931e3c41ca3de1a8aea"},{"last_affected":"52e718c730c1cb4ce1a97c547ed670a9c121d8bc"}],"database_specific":{"source":"CPE_STRING","cpe":["cpe:2.3:a:hm_email_project:hm_email:1.6.8c:*:*:*:*:*:*:*","cpe:2.3:a:hm_email_project:hm_email:1.6.8b:*:*:*:*:*:*:*","cpe:2.3:a:hm_email_project:hm_email:1.6.8a:*:*:*:*:*:*:*","cpe:2.3:a:hm_email_project:hm_email:1.6.8:*:*:*:*:*:*:*","cpe:2.3:a:hm_email_project:hm_email:1.6.7c:*:*:*:*:*:*:*","cpe:2.3:a:hm_email_project:hm_email:1.6.7b:*:*:*:*:*:*:*","cpe:2.3:a:hm_email_project:hm_email:1.6.7a:*:*:*:*:*:*:*","cpe:2.3:a:hm_email_project:hm_email:1.6.7:*:*:*:*:*:*:*","cpe:2.3:a:hm_email_project:hm_email:1.6.6:*:*:*:*:*:*:*","cpe:2.3:a:hm_email_project:hm_email:1.6.5:*:*:*:*:*:*:*","cpe:2.3:a:hm_email_project:hm_email:1.6.4:*:*:*:*:*:*:*","cpe:2.3:a:hm_email_project:hm_email:1.6.3:*:*:*:*:*:*:*","cpe:2.3:a:hm_email_project:hm_email:1.6.2:*:*:*:*:*:*:*","cpe:2.3:a:hm_email_project:hm_email:1.6.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.6.8c"},{"last_affected":"1.6.8c"},{"introduced":"1.6.8b"},{"last_affected":"1.6.8b"},{"introduced":"1.6.8a"},{"last_affected":"1.6.8a"},{"introduced":"1.6.8"},{"last_affected":"1.6.8"},{"introduced":"1.6.7c"},{"last_affected":"1.6.7c"},{"introduced":"1.6.7b"},{"last_affected":"1.6.7b"},{"introduced":"1.6.7a"},{"last_affected":"1.6.7a"},{"introduced":"1.6.7"},{"last_affected":"1.6.7"},{"introduced":"1.6.6"},{"last_affected":"1.6.6"},{"introduced":"1.6.5"},{"last_affected":"1.6.5"},{"introduced":"1.6.4"},{"last_affected":"1.6.4"},{"introduced":"1.6.3"},{"last_affected":"1.6.3"},{"introduced":"1.6.2"},{"last_affected":"1.6.2"},{"introduced":"1.6.0"},{"last_affected":"1.6.0"}]}}],"versions":["1.6.0","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.6.7c","1.6.8c"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-18938.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}