Skip to content
Noroxi

micasaverde records

5 published records for vendor micasaverde.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2013-4864
    41Plan

    MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to send HTTP requests to intranet servers via the url parameter to cgi-bi

    CriticalCVSS 9.8Proof of conceptEPSS 6%

    micasaverde · veralite firmwareJan 28, 2020

  • CVE-2013-4863
    39Monitor

    The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute arbitrary Lua code vi

    HighCVSS 8.8Proof of conceptEPSS 12%

    micasaverde · veralite firmwareJan 28, 2020

  • CVE-2013-4862
    33Monitor

    MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to (1) update the firm

    HighCVSS 8.1Proof of conceptEPSS 3%

    micasaverde · veralite firmwareJan 28, 2020

  • CVE-2013-4861
    28Monitor

    Directory traversal vulnerability in cgi-bin/cmh/get_file.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote authenticated users

    MediumCVSS 6.5Proof of conceptEPSS 6%

    micasaverde · veralite firmwareJan 28, 2020

  • CVE-2013-4865
    27Monitor

    Cross-site request forgery (CSRF) vulnerability in upgrade_step2.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to

    MediumCVSS 6.5Proof of conceptEPSS 1%

    micasaverde · veralite firmwareJan 28, 2020