Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Micasaverde Clear all filters
TI-2013-04266 CVE-2013-4862 · GHSA-246w-4q6g-jh9h

MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which…

Priority MEDIUM 42

MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to (1) update the firmware via the squashfs parameter to upgrade_step2.sh or (2) obtain hashed passwor…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.03724 Published 2020-01-28 No fix listed CWE-863
TI-2013-04267 CVE-2013-4863 · GHSA-fxg9-9cmj-2228

The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows…

Priority MEDIUM 52

The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute arbitrary Lua code via a RunLua action in a request to upnp/control/hag on port 49451 or (2) remote a…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.12184 Published 2020-01-28 No fix listed CWE-287
TI-2013-04269 CVE-2013-4865 · GHSA-9mgj-phmh-c9xm

Cross-site request forgery (CSRF) vulnerability in upgrade_step2.sh in MiCasaVerde…

Priority LOW 32

Cross-site request forgery (CSRF) vulnerability in upgrade_step2.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to hijack the authentication of users for requests that install arbitrary firmware…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01731 Published 2020-01-28 No fix listed CWE-352