Micasaverde Veralite Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Micasaverde Veralite Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2013-4864 — CVSS 9.8 (critical): MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to send HTTP requests to intranet servers via the url parameter to…
• CVE-2013-4863 — CVSS 8.8 (high): The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute arbitrary Lua code…
• CVE-2013-4862 — CVSS 8.1 (high): MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to (1) update the…
• CVE-2013-4861 — CVSS 6.5 (medium): Directory traversal vulnerability in cgi-bin/cmh/get_file.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote authenticated…
• CVE-2013-4865 — CVSS 6.5 (medium): Cross-site request forgery (CSRF) vulnerability in upgrade_step2.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers…