CVE-2017-9385

An issue was discovered on Vera Veralite 1.7.481 devices. The device has an additional OpenWRT interface in addition to the standard web interface which allows the highest privileges a user can obtain on the device. This web interface uses root as the username and the password in the...

CVE-2017-9385

CVE-2017-9385 affects Vera Veralite 1.7.481 devices. An extra OpenWRT interface alongside the standard web UI allows highest-privilege access after an attacker exploits a directory traversal to extract the root password from /etc/cmh/cmh.conf, enabling login with root-equivalent privileges. Docum...