CVE-2024-24578

RaspberryMatic is an open-source operating system for HomeMatic internet-of-things devices. RaspberryMatic / OCCU prior to version 3.75.6.20240316 contains a unauthenticated remote code execution (RCE) vulnerability, caused by multiple issues within the Java based `HMIPServer.jar` component. RaspberryMatric includes a Java based `HMIPServer`, that can be accessed through URLs starting with `/pages/jpages`. The `FirmwareController` class does however not perform any session id checks, thus this feature can be accessed without a valid session. Due to this issue, attackers can gain remote code execution as root user, allowing a full system compromise. Version 3.75.6.20240316 contains a patch.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1

10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

8.74% chance of exploitation in the next 30 days, 95th percentile

Published

2024-03-18

Updated

2024-08-26

Proof-of-concept exploits (1)

• jens-maus/RaspberryMatic/security/advisories/GHSA-q967-q4j8-637h

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/raspberrymatic_unauth…

References

• CVE Record
• NVD entry

Related

• CVE-2024-24576
• CVE-2024-24590
• CVE-2024-24574
• CVE-2024-2466
• CVE-2024-24573
• CVE-2024-24684