CVE-2013-4862

MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to (1) update the firmware via the…

published January 28, 2020

CVSS
—
EPSS
4%
Percentile
89.8
In the wild
Unconfirmed
What it is

MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to (1) update the firmware via the squashfs parameter to upgrade_step2.sh or (2) obtain hashed passwords via the cgi-bin/cmh/backup.sh page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03724 · 89.8th percentile
Published
2020-01-28T16:09Z
EPSS history
Timeline
  • 28 JAN 16:09Z
    MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to (1) update the firmware via the…
    cvelistv5