CVE-2017-9386

creationtimestamp| type| source ---|---|--- 2019-06-18 00:41:15+00:00| seen| https://t.me/cibsecurity/4961...

CVE-2017-9386

The CVE-2017-9386 entry concerns Vera VeraEdge (1.7.19) and Veralite (1.7.481). A script file get_file.sh on the device allows a user to read files within the cmh-ext folder, but the filename parameter is not properly validated, enabling directory traversal outside /cmh-ext to read arbitrary file...