EUVD-2019-6487

Malware in sbrugna...

Vera Edge Home Controller Command Injection Vulnerability

Vera Edge Home Controller is a smart home central control unit. A command injection vulnerability exists in the cgi-bin/cmh/webcam.sh file in Vera Edge Home Controller version 1.7.4452, which can be exploited by an attacker to execute illegal commands...

CVE-2019-15498

cgi-bin/cmh/webcam.sh in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via --output argument injection in the username parameter to /cgi-bin/cmh/webcam.sh...