NetSight
high8.8

CVE-2019-14453

An issue was discovered in Comelit "App lejos de casa (web)" 2.8.0.

Impact

An issue was discovered in Comelit "App lejos de casa (web)" 2.8.0. It allows privilege escalation via modified domus and logged fields, related to js/bridge.min.js and login.json. For example, an attacker can achieve high privileges (installer or administrator) for the graphical interface via a 1C000000000S value for domus, in conjunction with a zero value for logged.

Affected products

VendorProductAffected versions
ComelitgroupAway From Home
Version 2.8.0

Weakness classification

References