getvera records

14 published records for vendor getvera.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

14 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2019-13598No exploit	LuaUPnP in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via the code parameter togetvera · vera edge firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	4.2%	Jul 14, 2019
40Plan	CVE-2017-9385No exploit	An issue was discovered on Vera Veralite 1.7.481 devices.getvera · veraedge firmware · CWE-255 Pre-auth Path traversal	Critical9.8	—	3.5%	Jun 17, 2019
40Plan	CVE-2017-9383No exploit	An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.getvera · veraedge firmware · CWE-287 Auth bypass	Critical9.9	—	2.5%	Jun 17, 2019
36Monitor	CVE-2017-9389No exploit	An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.getvera · veraedge firmware · CWE-287 Auth bypass	High8.8	—	4.3%	Jun 17, 2019
36Monitor	CVE-2017-9392No exploit	An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.getvera · veraedge firmware · CWE-119 Memory safety	High8.8	—	4.2%	Jun 17, 2019
36Monitor	CVE-2017-9391No exploit	An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.getvera · veraedge firmware · CWE-119 Memory safety	High8.8	—	4.2%	Jun 17, 2019
36Monitor	CVE-2017-9384No exploit	An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.getvera · veraedge firmware · CWE-77 RCE Command injection	High8.8	—	3.6%	Jun 17, 2019
36Monitor	CVE-2017-9388No exploit	An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.getvera · veraedge firmware · CWE-77 RCE Command injection	High8.8	—	3.6%	Jun 17, 2019
36Monitor	CVE-2019-15498No exploit	cgi-bin/cmh/webcam.sh in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via --outpugetvera · vera edge firmware · CWE-88 pre-auth RCE	High8.8	—	3.4%	Aug 23, 2019
35Monitor	CVE-2017-9381No exploit	An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.getvera · veraedge firmware · CWE-352 Pre-auth CSRF	High8.8	—	1.1%	Jun 17, 2019
27Monitor	CVE-2017-9382No exploit	An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.getvera · veraedge firmware · CWE-22 Path traversal	Medium6.5	—	3.7%	Jun 17, 2019
27Monitor	CVE-2017-9386No exploit	An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.getvera · veraedge firmware · CWE-22 Path traversal	Medium6.5	—	3.1%	Jun 17, 2019
24Monitor	CVE-2017-9390No exploit	An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.getvera · veraedge firmware · CWE-79 Pre-auth XSS	Medium6.1	—	1.5%	Jun 17, 2019
21Monitor	CVE-2017-9387No exploit	An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.getvera · veraedge firmware · CWE-79 XSS	Medium5.4	—	0.6%	Jun 17, 2019

CVE-2019-13598
40Plan
LuaUPnP in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via the code parameter to
CriticalCVSS 9.8No exploitEPSS 4%
- pre-auth RCE
- Command injection
getvera · vera edge firmwareJul 14, 2019
CVE-2017-9385
40Plan
An issue was discovered on Vera Veralite 1.7.481 devices.
CriticalCVSS 9.8No exploitEPSS 4%
- Pre-auth
- Path traversal
getvera · veraedge firmwareJun 17, 2019
CVE-2017-9383
40Plan
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
CriticalCVSS 9.9No exploitEPSS 3%
- Auth bypass
getvera · veraedge firmwareJun 17, 2019
CVE-2017-9389
36Monitor
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
HighCVSS 8.8No exploitEPSS 4%
- Auth bypass
getvera · veraedge firmwareJun 17, 2019
CVE-2017-9392
36Monitor
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
HighCVSS 8.8No exploitEPSS 4%
- Memory safety
getvera · veraedge firmwareJun 17, 2019
CVE-2017-9391
36Monitor
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
HighCVSS 8.8No exploitEPSS 4%
- Memory safety
getvera · veraedge firmwareJun 17, 2019
CVE-2017-9384
36Monitor
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
HighCVSS 8.8No exploitEPSS 4%
- RCE
- Command injection
getvera · veraedge firmwareJun 17, 2019
CVE-2017-9388
36Monitor
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
HighCVSS 8.8No exploitEPSS 4%
- RCE
- Command injection
getvera · veraedge firmwareJun 17, 2019
CVE-2019-15498
36Monitor
cgi-bin/cmh/webcam.sh in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via --outpu
HighCVSS 8.8No exploitEPSS 3%
- pre-auth RCE
getvera · vera edge firmwareAug 23, 2019
CVE-2017-9381
35Monitor
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- CSRF
getvera · veraedge firmwareJun 17, 2019
CVE-2017-9382
27Monitor
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
MediumCVSS 6.5No exploitEPSS 4%
- Path traversal
getvera · veraedge firmwareJun 17, 2019
CVE-2017-9386
27Monitor
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
MediumCVSS 6.5No exploitEPSS 3%
- Path traversal
getvera · veraedge firmwareJun 17, 2019
CVE-2017-9390
24Monitor
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
MediumCVSS 6.1No exploitEPSS 2%
- Pre-auth
- XSS
getvera · veraedge firmwareJun 17, 2019
CVE-2017-9387
21Monitor
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
MediumCVSS 5.4No exploitEPSS 1%
- XSS
getvera · veraedge firmwareJun 17, 2019