PatchTheCVEveralite firmware vulnerabilities and fixes
Recent CVEs affecting veralite firmware, with upgrade or downgrade steps. 5 tracked.
Also searched as: veralitefirmware.
veralite firmware has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-01-28. Highest priority: CVE-2013-4864 (score 68/100).
- CVE-2013-4865 MEDIUM 6.5 MITIGATE Cross-site request forgery (CSRF) vulnerability in upgrade_step2.sh in MiCasaVerde VeraLite with firmware 1.5.
- CVE-2013-4864 CRITICAL 9.8 MITIGATE MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to send HTTP requests to intranet servers v
- CVE-2013-4863 HIGH 8.8 MITIGATE The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to
- CVE-2013-4862 HIGH 8.1 MITIGATE MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticate
- CVE-2013-4861 MEDIUM 6.5 MITIGATE Directory traversal vulnerability in cgi-bin/cmh/get_file.sh in MiCasaVerde VeraLite with firmware 1.5.408 all
FAQ
How do I fix veralite firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is veralite firmware being exploited right now?
None of the tracked veralite firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which veralite firmware CVE should I patch first?
CVE-2013-4864 currently ranks highest (68/100): MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to send HTTP requests to intranet servers v.