Vendors / Getvera Records 14 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 7
Exploited now Getvera records in CISA KEV No Getvera vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 49
LuaUPnP in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via the code parameter to /port_3480/data_request because the "No unsafe lua allowed" code block is skipp…
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04201 · Published 2019-07-14 · No fix listed CWE-78
Priority MEDIUM 48
An issue was discovered on Vera Veralite 1.7.481 devices.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03543 · Published 2019-06-17 · No fix listed CWE-255
Priority MEDIUM 47
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0 CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.02463 · Published 2019-06-17 · No fix listed CWE-287
Priority MEDIUM 45
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04082 · Published 2019-06-17 · No fix listed CWE-119
Priority MEDIUM 45
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04082 · Published 2019-06-17 · No fix listed CWE-119
Priority MEDIUM 45
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04223 · Published 2019-06-17 · No fix listed CWE-287
Priority MEDIUM 44
cgi-bin/cmh/webcam.sh in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via --output argument injection in the username parameter to /cgi-bin/cmh/webcam.sh.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.03442 · Published 2019-08-23 · No fix listed CWE-88
Priority MEDIUM 44
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03494 · Published 2019-06-17 · No fix listed CWE-77
Priority MEDIUM 44
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03494 · Published 2019-06-17 · No fix listed CWE-77
Priority MEDIUM 40
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01128 · Published 2019-06-17 · No fix listed CWE-352
Priority LOW 35
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03583 · Published 2019-06-17 · No fix listed CWE-22
Priority LOW 34
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03083 · Published 2019-06-17 · No fix listed CWE-22
Priority LOW 30
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01533 · Published 2019-06-17 · No fix listed CWE-79
Priority LOW 25
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00602 · Published 2019-06-17 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
3 7 4 0 0
THREATIST.IORead the docs