Homematic CCU3 - Local File Inclusion (CVE-2019-9726)

eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read arbitrary files of the device's filesystem, aka local file inclusion. This vulnerability can be exploited by unauthenticated attackers with access to the web interface.eQ-3 AG Homematic CCU3 3.43.15及更早版本允许远程攻击者读取设备文件系统的任意文件，亦称本地文件包含漏洞。此漏洞可被未经验证的攻击者，通过访问网络界面加以利用。