CVE-2019-14453: Comelitgroup Away From Home

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue was discovered in Comelit "App lejos de casa (web)" 2.8.0. It allows privilege escalation via modified domus and logged fields, related to js/bridge.min.js and login.json. For example, an attacker can achieve high privileges (installer or administrator) for the graphical interface via a 1C000000000S value for domus, in conjunction with a zero value for logged.

Affected products

• Comelitgroup Away From Home: version 2.8.0 only

Published 2021-08-03. Last modified 2026-06-17.