Security Advisory
CVE-2013-4862
8.1
HIGH
Vulnerability Description
MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to (1) update the firmware via the squashfs parameter to upgrade_step2.sh or (2) obtain hashed passwords via the cgi-bin/cmh/backup.sh page.
Published Date
January 28, 2020
Official Source
NIST NVD Advisory