What’s Vulnerable › Vulnerabilities

CVE-2019-14453

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-08-03 · updated 2026-06-17
• Weakness: CWE-269

Description

An issue was discovered in Comelit "App lejos de casa (web)" 2.8.0. It allows privilege escalation via modified domus and logged fields, related to js/bridge.min.js and login.json. For example, an attacker can achieve high privileges (installer or administrator) for the graphical interface via a 1C000000000S value for domus, in conjunction with a zero value for logged.

Affected products

• Comelitgroup Away From Home: 2.8.0

References

• https://www.blogx86.net/2021/07/26/cve-2019-14453/
• https://www.blogx86.net/2021/07/26/cve-2019-14453/

Get alerted when CVE-2019-14453 or the next vulnerability affects your stack