CVE-2019-14424

A Local File Inclusion LFI issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to read sensitive files via a simple HTTP Request...

CVE-2019-14424

The CVE-2019-14424 issue affects the CUx-Daemon 1.11a component of eQ-3 Homematic CCU-Firmware, specifically versions 2.35.16 through 2.45.6. It is a Local File Inclusion (LFI) vulnerability that allows remote authenticated attackers to read sensitive files via a simple HTTP request. The connecte...