Security Advisory

CVE-2013-4862

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-01-28 16:09:36

Last updated 2024-08-06 16:59:40

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to (1) update the firmware via the squashfs parameter to upgrade_step2.sh or (2) obtain hashed passwords via the cgi-bin/cmh/backup.sh page.

← Browse all CVEs View on cve.org ↗