CVE-2019-14424 | BDVDB-2026-124694 Detail

Description#

A Local File Inclusion (LFI) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to read sensitive files via a simple HTTP Request.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.eq-3.com/products/homematic.html
https://noskill1337.github.io/homematic-with-cux-daemon-local-file-inclusion

Exploit#

No public exploit known

History#

Version 12019-10-17Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.