Read the docs

Micasaverde

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Micasaverde records in CISA KEV

No Micasaverde vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Veralite Firmware 5 records MEDIUM

Records

5 records

TI-2013-04267 CVE-2013-4863 · GHSA-fxg9-9cmj-2228

The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows…

Priority MEDIUM 52

The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute arbitrary Lua code via a RunLua action in a request to upnp/control/hag on port 49451 or (2) remote a…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.12184 Published 2020-01-28 No fix listed CWE-287
TI-2013-04266 CVE-2013-4862 · GHSA-246w-4q6g-jh9h

MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which…

Priority MEDIUM 42

MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to (1) update the firmware via the squashfs parameter to upgrade_step2.sh or (2) obtain hashed passwor…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.03724 Published 2020-01-28 No fix listed CWE-863
TI-2013-04269 CVE-2013-4865 · GHSA-9mgj-phmh-c9xm

Cross-site request forgery (CSRF) vulnerability in upgrade_step2.sh in MiCasaVerde…

Priority LOW 32

Cross-site request forgery (CSRF) vulnerability in upgrade_step2.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to hijack the authentication of users for requests that install arbitrary firmware…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01731 Published 2020-01-28 No fix listed CWE-352
Open these records in search →