CVE-2019-14473

CVE-2019-14473 describes a critical authorization bypass vulnerability affecting eQ-3 Homematic CCU2 and CCU3 devices. This flaw allows an authenticated attacker with guest or user-level privileges to escalate their access to administrative control, enabling actions such as creating new admin accounts, reading sensitive messages, clearing system logs, or modifying internal programs. With a CVSS score of 8.8 (High), this vulnerability is easily exploitable over the network with low attack complexity, posing a significant risk of complete compromise (Confidentiality, Integrity, Availability). Despite its severity, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.