CVE-2017-9381

Vera VeraEdge (1.7.19) and Veralite (1.7.481) expose a CSRF vulnerability in their web management interface that allows an attacker to trick a logged-in user into installing or deleting apps. The root cause is the absence of cross-site request forgery protection, a systemic issue affecting other ...

CVE-2017-9388

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a web user interface that allows a user to manage the device. As a part of the functionality the device firmware file contains a file known as proxy.sh which allows the device to proxy a specific...

Design/Logic Flaw

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a web user interface that allows a user to manage the device. As a part of the functionality the device firmware file contains a file known as proxy.sh which allows the device to proxy a specific...

CVE-2017-9384

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a web user interface that allows a user to manage the device. As a part of the functionality the device firmware file contains a file known as relay.sh which allows the device to create relay ports a...

CVE-2017-9384

The CVE-2017-9384 entry concerns Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device firmware includes relay.sh, a script used for establishing relay ports and Vera server communication. A parameter named remote_host is not sanitized and is concatenated into a subsequent script call via...

CVE-2017-9388

The CVE-2017-9388 issue affects Vera VeraEdge 1.7.19 and Veralite 1.7.481. A web UI feature includes a firmware file, proxy.sh, which proxies requests between the device and Vera’s website. The parameter url is not sanitized and is evaluated via eval to run curl, allowing an attacker to escape th...

CVE-2017-9392: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be accessed via port 80 using the url "/port3480". It seems that the UPnP services provide "requestimage" as one of the service actions for ...

CVE-2017-9387: Improper Neutralization of Input During Web Page Generation

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a shell script called relay.sh which is used for creating new SSH relays for the device so that the device connects to Vera servers. All the parameters passed in this specific script are logged to a...

CVE-2017-9385: Undefined Security Weakness

An issue was discovered on Vera Veralite 1.7.481 devices. The device has an additional OpenWRT interface in addition to the standard web interface which allows the highest privileges a user can obtain on the device. This web interface uses root as the username and the password in the...

CVE-2017-9391: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be accessed via port 80 using the url "/port3480". It seems that the UPnP services provide "requestimage" as one of the service actions for ...

CVE-2017-9390: Improper Neutralization of Input During Web Page Generation

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a shell script called connect.sh which is supposed to return a specific cookie for the user when the user is authenticated to https://home.getvera.com. One of the parameters retrieved by this script ...

CVE-2017-9389: Improper Authentication

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a web user interface that allows a user to manage the device. As a part of the functionality the device allows a user to install applications written in the Lua programming language. Also the interfa...

CVE-2017-9384: Improper Neutralization of Special Elements used in a Command

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a web user interface that allows a user to manage the device. As a part of the functionality the device firmware file contains a file known as relay.sh which allows the device to create relay ports a...

CVE-2017-9383: Improper Authentication

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be accessed via port 80 using the url "/port3480". It seems that the UPnP services provide "wget" as one of the service actions for a normal...

CVE-2017-9382: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be accessed via port 80 using the url "/port3480". It seems that the UPnP services provide "file" as one of the service actions for a normal...

CVE-2017-9388: Improper Neutralization of Special Elements used in a Command

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a web user interface that allows a user to manage the device. As a part of the functionality the device firmware file contains a file known as proxy.sh which allows the device to proxy a specific...

CVE-2017-9386: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a script file called "getfile.sh" which allows a user to retrieve any file stored in the "cmh-ext" folder on the device. However, the "filename" parameter is not validated correctly and this allows a...

PT-2019-8661

Name of the Vulnerable Software and Affected Versions Vera VeraEdge version 1.7.19 Vera Veralite version 1.7.481 Description An issue was discovered in the UPnP services provided by the device, which can be accessed on port 3480 or via port 80 using the url "/port 3480". The "request image" servi...

PT-2019-8659

Name of the Vulnerable Software and Affected Versions Vera VeraEdge version 1.7.19 Vera Veralite version 1.7.481 Description An issue was discovered in the devices, where a shell script called connect.sh is used to return a specific cookie for the user when authenticated to...

PT-2019-8654

Name of the Vulnerable Software and Affected Versions Vera Veralite version 1.7.481 Description An issue was discovered on the device, which has an additional OpenWRT interface in addition to the standard web interface, allowing the highest privileges a user can obtain on the device. This web...