PatchTheCVEgetvera vulnerabilities
Recent CVEs affecting getvera products. 14 tracked.
getvera has 14 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 12. Most recent: 2019-08-23. Highest priority: CVE-2019-13598 (score 67/100).
- CVE-2019-15498 HIGH 8.8 MITIGATE cgi-bin/cmh/webcam.sh in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arb
- CVE-2019-13598 CRITICAL 9.8 MITIGATE LuaUPnP in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS comm
- CVE-2017-9392 HIGH 8.8 UPGRADE UPGRADE An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices
- CVE-2017-9391 HIGH 8.8 UPGRADE UPGRADE An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices
- CVE-2017-9390 MEDIUM 6.1 UPGRADE UPGRADE An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices
- CVE-2017-9389 HIGH 8.8 UPGRADE UPGRADE An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices
- CVE-2017-9388 HIGH 8.8 UPGRADE UPGRADE An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices
- CVE-2017-9387 MEDIUM 5.4 UPGRADE UPGRADE An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices
- CVE-2017-9386 MEDIUM 6.5 UPGRADE UPGRADE An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices
- CVE-2017-9385 CRITICAL 9.8 UPGRADE UPGRADE An issue was discovered on Vera Veralite 1.7.481 devices
- CVE-2017-9384 HIGH 8.8 UPGRADE UPGRADE An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices
- CVE-2017-9383 CRITICAL 9.9 UPGRADE UPGRADE An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices
- CVE-2017-9382 MEDIUM 6.5 UPGRADE UPGRADE An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices
- CVE-2017-9381 HIGH 8.8 UPGRADE UPGRADE An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices
FAQ
How do I fix getvera vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is getvera being exploited right now?
None of the tracked getvera CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which getvera CVE should I patch first?
CVE-2019-13598 currently ranks highest (67/100): LuaUPnP in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS comm.