Lucene search

K
cvelistMitreCVELIST:CVE-2013-4862
HistoryJan 28, 2020 - 4:09 p.m.

CVE-2013-4862

2020-01-2816:09:36
mitre
www.cve.org
1

7.8 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.6%

MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to (1) update the firmware via the squashfs parameter to upgrade_step2.sh or (2) obtain hashed passwords via the cgi-bin/cmh/backup.sh page.

7.8 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.6%