CVE-2019-14453
Last modified
CVE-2019-14453 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. An issue was discovered in Comelit "App lejos de casa (web)" 2.8.0. It allows privilege escalation via modified domus and logged fields, related to js/bridge.min.js and login.json. EPSS estimates a 1.23% chance of exploitation in the next 30 days.
Description
An issue was discovered in Comelit "App lejos de casa (web)" 2.8.0. It allows privilege escalation via modified domus and logged fields, related to js/bridge.min.js and login.json. For example, an attacker can achieve high privileges (installer or administrator) for the graphical interface via a 1C000000000S value for domus, in conjunction with a zero value for logged.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Comelitgroup | Away From Home | 2.8.0 |
References
- https://www.blogx86.net/2021/07/26/cve-2019-14453/Exploit, Third Party Advisory
- https://www.blogx86.net/2021/07/26/cve-2019-14453/Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-14453?
How severe is CVE-2019-14453?
How do I fix CVE-2019-14453?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-14444apply_relocations in readelf.c in GNU Binutils 2.32 contains…5.5
- CVE-2019-14449An issue was discovered in Cloudera Manager 5.x before 5.16.…5.4
- CVE-2019-1445A spoofing vulnerability exists when Office Online does not …5.4
- CVE-2019-14450A directory traversal vulnerability was discovered in Repeti…9.8
- CVE-2019-14451RepetierServer.exe in Repetier-Server 0.8 through 0.91 does …9.8
- CVE-2019-14452Sigil before 0.9.16 is vulnerable to a directory traversal, …
- CVE-2019-14454SuiteCRM 7.11.x and 7.10.x before 7.11.8 and 7.10.20 is vuln…9.8
- CVE-2019-14456Opengear console server firmware releases prior to 4.5.0 hav…
- CVE-2019-14457VIVOTEK IP Camera devices with firmware before 0x20x have a …9.8
- CVE-2019-14458VIVOTEK IP Camera devices with firmware before 0x20x allow a…7.5
- CVE-2019-14459nfdump 1.6.17 and earlier is affected by an integer overflow…7.5
- CVE-2019-1446An information disclosure vulnerability exists when Microsof…5.5
Are you affected by CVE-2019-14453?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST