CVE-2017-9388

creationtimestamp| type| source ---|---|--- 2019-06-17 20:33:12+00:00| seen| https://t.me/cibsecurity/4946...

CVE-2017-9388

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a web user interface that allows a user to manage the device. As a part of the functionality the device firmware file contains a file known as proxy.sh which allows the device to proxy a specific...

CVE-2017-9388

The CVE-2017-9388 issue affects Vera VeraEdge 1.7.19 and Veralite 1.7.481. A web UI feature includes a firmware file, proxy.sh, which proxies requests between the device and Vera’s website. The parameter url is not sanitized and is evaluated via eval to run curl, allowing an attacker to escape th...