CVE-2018-7299: Eq-3 Homematic Central Control Unit CCU2 Firmware

High severity, CVSS 8.0. EPSS: 1.1% chance of exploitation in the next 30 days.

Remote Code Execution in the addon installation process in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows authenticated attackers to create or overwrite arbitrary files or install malicious software on the device.

Affected products

• Eq-3 Homematic Central Control Unit CCU2 Firmware: up to and including 2.29.22

Published 2018-02-22. Last modified 2026-06-17.