CVE-2017-9385

CVE-2017-9385 affects Vera Veralite 1.7.481 devices. An extra OpenWRT interface alongside the standard web UI allows highest-privilege access after an attacker exploits a directory traversal to extract the root password from /etc/cmh/cmh.conf, enabling login with root-equivalent privileges. Docum...