Medium severity6.5NVD Advisory· Published Oct 17, 2019· Updated Jun 17, 2026

CVE-2019-14424

Description

A Local File Inclusion (LFI) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to read sensitive files via a simple HTTP Request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

eQ-3/Homematic CCU-Firmwaredescription
eQ-3/Homematic CCU-Firmwarellm-fuzzy
Range: 2.35.16 - 2.45.6
eQ-3/CUx-Daemonllm-fuzzy
Range: 1.11a

Patches

Vulnerability mechanics

References

noskill1337.github.io/homematic-with-cux-daemon-local-file-inclusionnvdExploitMitigationThird Party Advisory
www.eq-3.com/products/homematic.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000