Beveiligingsadvies

CVE-2013-4863

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-01-28 16:09:32
Laatst bijgewerkt 2024-08-06 16:59:40
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute arbitrary Lua code via a RunLua action in a request to upnp/control/hag on port 49451 or (2) remote authenticated users to execute arbitrary Lua code via a RunLua action in a request to port_49451/upnp/control/hag.