Priority MEDIUM 44
cgi-bin/cmh/webcam.sh in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via --output argument injection in the username parameter to /cgi-bin/cmh/webcam.sh.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.03442 · Published 2019-08-23 · No fix listed CWE-88
Priority MEDIUM 49
LuaUPnP in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via the code parameter to /port_3480/data_request because the "No unsafe lua allowed" code block is skipp…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04201 · Published 2019-07-14 · No fix listed CWE-78
Priority MEDIUM 45
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04082 · Published 2019-06-17 · No fix listed CWE-119
Priority MEDIUM 45
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04082 · Published 2019-06-17 · No fix listed CWE-119
Priority LOW 35
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03583 · Published 2019-06-17 · No fix listed CWE-22
Priority MEDIUM 47
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.02463 · Published 2019-06-17 · No fix listed CWE-287
Priority MEDIUM 48
An issue was discovered on Vera Veralite 1.7.481 devices.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03543 · Published 2019-06-17 · No fix listed CWE-255
Priority LOW 34
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03083 · Published 2019-06-17 · No fix listed CWE-22
Priority MEDIUM 45
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04223 · Published 2019-06-17 · No fix listed CWE-287
Priority LOW 25
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00602 · Published 2019-06-17 · No fix listed CWE-79
Priority LOW 30
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01533 · Published 2019-06-17 · No fix listed CWE-79
Priority MEDIUM 40
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01128 · Published 2019-06-17 · No fix listed CWE-352
Priority MEDIUM 44
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03494 · Published 2019-06-17 · No fix listed CWE-77
Priority MEDIUM 44
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03494 · Published 2019-06-17 · No fix listed CWE-77
THREATIST.IORead the docs