Read the docs
TI-2022-08609 Aliases CVE-2022-24796

Remote Command Injection in RaspberryMatic

Priority MEDIUM 55CWE-78Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

RaspberryMatic is a free and open-source operating system for running a cloud-free smart-home using the homematicIP / HomeMatic hardware line of IoT devices. A Remote Code Execution (RCE) vulnerability in the file upload facility of the WebUI interface of RaspberryMatic exists. Missing input validation/sanitization in the file upload mechanism allows remote, unauthenticated attackers with network access to the WebUI interface to achieve arbitrary operating system command execution via shell metacharacters in the HTTP query string. Injected commands are executed as root, thus leading to a full compromise of the underlying system and all its components. Versions after `2.31.25.20180428` and prior to `3.63.8.20220330` are affected. Users are advised to update to version `3.63.8.20220330` or newer. There are currently no known workarounds to mitigate the security impact and users are advised to update to the latest version available.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.03741 89th percentileScored 2026-11-07
Fix Fixed RaspberryMatic (jens-maus): 3.63.8.20220330

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
jens-mausRaspberryMatic2.31.25.20180428 to before 3.63.8.202203303.63.8.20220330Patch availableCNA
  • RaspberryMatic Vendorjens-maus Affected 2.31.25.20180428 to before 3.63.8.20220330 Fixed in 3.63.8.20220330 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:o:raspberrymatic:raspberrymatic:*:*:*:*:*:*:*:*2.31.25.20180428 to before 3.63.8.20220330VulnerableRaspberrymatic
  • cpe:2.3:o:raspberrymatic:raspberrymatic:*:*:*:*:*:*:*:* Versions 2.31.25.20180428 to before 3.63.8.20220330 Vulnerable ·Raspberrymatic

Remediation

  • Fix · CNA RaspberryMatic (jens-maus) Fixed in 3.63.8.20220330

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-24796

References

Patch 2

  • TI-2024-16199 RaspberryMatic Unauthenticated Remote Code Execution vulnerability through HMServer File Upload CVSS 3.1CRITICAL 10.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences