Read the docs
TI-2024-16199 Aliases CVE-2024-24578

RaspberryMatic Unauthenticated Remote Code Execution vulnerability through HMServer File Upload

Priority HIGH 82CWE-23Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-306.

Summary

RaspberryMatic is an open-source operating system for HomeMatic internet-of-things devices. RaspberryMatic / OCCU prior to version 3.75.6.20240316 contains a unauthenticated remote code execution (RCE) vulnerability, caused by multiple issues within the Java based `HMIPServer.jar` component. RaspberryMatric includes a Java based `HMIPServer`, that can be accessed through URLs starting with `/pages/jpages`. The `FirmwareController` class does however not perform any session id checks, thus this feature can be accessed without a valid session. Due to this issue, attackers can gain remote code execution as root user, allowing a full system compromise. Version 3.75.6.20240316 contains a patch.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.08739 95th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed RaspberryMatic (jens-maus): 3.75.6.20240316

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
jens-mausRaspberryMaticbefore 3.75.6.202403163.75.6.20240316Patch availableCNA
  • RaspberryMatic Vendorjens-maus Affected before 3.75.6.20240316 Fixed in 3.75.6.20240316 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:o:raspberrymatic:raspberrymatic:*:*:*:*:*:*:*:*before 3.75.6.20240316VulnerableRaspberrymatic
  • cpe:2.3:o:raspberrymatic:raspberrymatic:*:*:*:*:*:*:*:* Versions before 3.75.6.20240316 Vulnerable ·Raspberrymatic

Remediation

  • Fix · CNA RaspberryMatic (jens-maus) Fixed in 3.75.6.20240316

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-24578

References

Exploit 1

  • TI-2022-08609 Remote Command Injection in RaspberryMatic CVSS 3.1CRITICAL 10.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences