Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-9354 State: PUBLISHED Published: 2017-06-02T05:04:00 Last Updated: 2024-08-05T17:02:44.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the RGMP dissector could crash. This was addressed in epan/dissectors/packet-rgmp.c by validating an IPv4 address. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98802 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1243 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13646 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3a77395e651acd81eb41ffd8fbdbf711e1133d76 - https://www.wireshark.org/
k.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3a77395e651acd81eb41ffd8fbdbf711e1133d76 - https://www.wireshark.org/security/wnpa-sec-2017-32.html - http://www.securitytracker.com/id/1038612
CVE ID: CVE-2017-9355 State: PUBLISHED Published: 2017-06-07T19:00:00 Last Updated: 2024-08-05T17:02:44.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted XSPF playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/142795/Subsonic-6.1.1-XML-External-Entity-Attack.html - http://hyp3rlinx.altervista.org/advisories/SUBSONIC-XML-EXTERNAL-ENITITY.txt - https://www.exploit-db.com/exploits/42119/
CVE ID: CVE-2017-9356 State: PUBLISHED Published: 2017-06-23T05:00:00 Last Updated: 2024-08-05T17:02:44.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Results URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99239 - http://seclists.org/bugtraq/2017/Jun/43
CVE ID: CVE-2017-9358 State: PUBLISHED Published: 2017-06-02T05:04:00 Last Updated: 2024-08-05T17:02:44.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1 and Certified Asterisk 13.13 before 13.13-cert4, which can be triggered by sending specially crafted SCCP packets causing an infinite loop and leading to memory exhaustion (by message logging in that loop). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038531 - http://www.securityfocus.com/bid/98573 - http://downloads.asterisk.org/pub/security/AST-2017-004.txt - https
d/1038531 - http://www.securityfocus.com/bid/98573 - http://downloads.asterisk.org/pub/security/AST-2017-004.txt - https://bugs.debian.org/863906
CVE ID: CVE-2017-9359 State: PUBLISHED Published: 2017-06-02T05:04:00 Last Updated: 2024-08-05T17:02:44.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/863902 - http://downloads.asterisk.org/pub/security/AST-2017-003.txt - https://issues.asterisk.org/jira/browse/ASTERISK-26939 - http://www.security
sterisk.org/pub/security/AST-2017-003.txt - https://issues.asterisk.org/jira/browse/ASTERISK-26939 - http://www.securityfocus.com/bid/98578 - http://www.debian.org/security/2017/dsa-3933
CVE ID: CVE-2017-9360 State: PUBLISHED Published: 2017-06-02T05:04:00 Last Updated: 2024-08-05T17:02:44.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php. Additional Analyst Notes: - CVE Program Container: References: - https://jgj212.blogspot.tw/2017/05/a-sql-injection-vulnerability-in.html
CVE ID: CVE-2017-9361 State: PUBLISHED Published: 2017-06-02T05:04:00 Last Updated: 2024-08-05T17:02:44.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebsiteBaker v2.10.0 has a stored XSS vulnerability in /account/details.php. Additional Analyst Notes: - CVE Program Container: References: - https://jgj212.blogspot.tw/2017/05/a-stored-xss-vulnerability-in.html
CVE ID: CVE-2017-9362 State: PUBLISHED Published: 2019-03-25T15:54:17 Last Updated: 2024-08-05T17:02:44.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: ManageEngine ServiceDesk Plus before 9312 contains an XML injection at add Configuration items CMDB API. Additional Analyst Notes: - CVE Program Container: References: - https://labs.integrity.pt/advisories/cve-2017-9362
CVE ID: CVE-2017-9363 State: PUBLISHED Published: 2017-06-02T05:04:00 Last Updated: 2024-08-05T17:02:44.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted Java serialization in Soffid IAM console before 1.7.5 allows remote attackers to achieve arbitrary remote code execution via a crafted authentication request. Additional Analyst Notes: - CVE Program Container: References: - http://www.soffid.com/security-advisory1-update/
CVE ID: CVE-2017-9364 State: PUBLISHED Published: 2017-06-02T05:04:00 Last Updated: 2024-08-05T17:02:44.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted File Upload exists in BigTree CMS through 4.2.18: if an attacker uploads an 'xxx.pht' or 'xxx.phtml' file, they could bypass a safety check and execute any code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigtreecms/BigTree-CMS/commit/b72293946951cc650eaf51f5d2f62ceac6335e12 - https://github.com/bigtreecms/BigTree-CMS/issues/280
CVE ID: CVE-2017-9365 State: PUBLISHED Published: 2017-06-02T05:04:00 Last Updated: 2024-08-05T17:02:44.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSRF exists in BigTree CMS through 4.2.18 with the force parameter to /admin/pages/revisions.php - for example: /admin/pages/revisions/1/?force=false. A page with id=1 can be unlocked. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigtreecms/BigTree-CMS/issues/281 - https://github.com/bigtreecms/BigTree-CMS/commit/c17d09b05d9c20c214ee2f4fbb52f7307a7b4b6f
CVE ID: CVE-2017-9366 State: PUBLISHED Published: 2017-06-02T05:04:00 Last Updated: 2024-08-05T17:02:44.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in modules/Base/Dashboard/Dashboard_0.php, which allows remote attackers to inject arbitrary web script or HTML via a crafted tab_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Telaxus/EPESI/issues/196 - https://github.com/Telaxus/EPESI/commit/36be628c2597fd0209224a09b17858294f49c585
CVE ID: CVE-2017-9367 State: PUBLISHED Published: 2017-10-16T21:00:00Z Last Updated: 2024-09-16T16:24:17.407Z Vendors: BlackBerry Products: Workspaces Server Problem Types: Directory traversal Description: A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on the web server by crafting a URL with a manipulated POST request. Additional Analyst Notes: - CVE Program Container: References: - http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045696
CVE ID: CVE-2017-9368 State: PUBLISHED Published: 2017-10-16T21:00:00Z Last Updated: 2024-09-17T03:37:37.243Z Vendors: BlackBerry Products: Workspaces Server Problem Types: Information disclosure Description: An information disclosure vulnerability in the BlackBerry Workspaces Server could result in an attacker gaining access to source code for server-side applications by crafting a request for specific files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96542 - http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045696
CVE ID: CVE-2017-9369 State: PUBLISHED Published: 2017-11-14T21:00:00Z Last Updated: 2025-08-26T17:30:03.762Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: BlackBerry Products: QNX Software Development Platform (SDP) Problem Types: CWE-200 Description: In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, an information disclosure vulnerability in the default configuration of the QNX SDP could allow an attacker to gain information relating to memory layout of higher privileged processes by manipulating environment variables that influence the loader. Additional Analyst Notes: - CVE Program Container: References: - http://suppo
nment variables that influence the loader. Additional Analyst Notes: - CVE Program Container: References: - http://support.blackberry.com/kb/articleDetail?articleNumber=000046674
CVE ID: CVE-2017-9370 State: PUBLISHED Published: 2017-08-09T17:00:00Z Last Updated: 2024-09-17T00:32:13.175Z Vendors: BlackBerry Products: BlackBerry Workspaces Server; WatchDox by BlackBerry Server Problem Types: Information disclosure/elevation of privilege Description: An information disclosure / elevation of privilege vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker who has legitimate access to BlackBerry Workspaces to gain access to another user's workspace by making multiple login requests to the server. Additional Analyst Notes: - CVE Program Container: References: - http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=00004
- CVE Program Container: References: - http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045350
CVE ID: CVE-2017-9371 State: PUBLISHED Published: 2017-11-14T21:00:00Z Last Updated: 2025-08-22T15:05:29.013Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: BlackBerry Products: QNX Software Development Platform (QNX SDP) Problem Types: Loss of integrity vulnerability, CWE-332 Description: In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default configuration of the QNX SDP could allow an attacker being able to reduce the entropy of the PRNG, making other blended attacks more practical by gaining control over environmental factors that influence seed generation. Additional Analyst N
ttacks more practical by gaining control over environmental factors that influence seed generation. Additional Analyst Notes: - CVE Program Container: References: - http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000046674
CVE ID: CVE-2017-9372 State: PUBLISHED Published: 2017-06-02T14:00:00 Last Updated: 2024-08-05T17:02:44.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service (buffer overflow and application crash) via a SIP packet with a crafted CSeq header in conjunction with a Via header that lacks a branch parameter. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/863901 - http://downloads.asterisk.org/pub/security/AST-2017-002.txt - http://www.securityfocu
- https://bugs.debian.org/863901 - http://downloads.asterisk.org/pub/security/AST-2017-002.txt - http://www.securityfocus.com/bid/98572 - http://www.debian.org/security/2017/dsa-3933 - http://www.securitytracker.com/id/1038529
CVE ID: CVE-2017-9373 State: PUBLISHED Published: 2017-06-16T22:00:00 Last Updated: 2024-08-05T17:02:44.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the AHCI device. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3920 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d68f0f778e7f4fbd674627274267f269e40f0b04 - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - http://www.securityfocus.com/bid/98921 -
e40f0b04 - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - http://www.securityfocus.com/bid/98921 - https://access.redhat.com/errata/RHSA-2017:2392 - https://bugzilla.redhat.com/show_bug.cgi?id=1458270 - http://www.openwall.com/lists/oss-security/2017/06/05/1 - https://access.redhat.com/errata/RHSA-2017:2408
CVE ID: CVE-2017-9374 State: PUBLISHED Published: 2017-06-16T22:00:00 Last Updated: 2024-08-05T17:02:44.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the device. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3920 - http://www.openwall.com/lists/oss-security/2017/06/06/3 - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://bugzilla.redhat.com/show_bug.cgi?id=1459132 - https://access.redhat.c
ebian-lts-announce/2018/09/msg00007.html - https://bugzilla.redhat.com/show_bug.cgi?id=1459132 - https://access.redhat.com/errata/RHSA-2017:2392 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d710e1e7bd3d5bfc26b631f02ae87901ebe646b0 - https://access.redhat.com/errata/RHSA-2017:2408 - http://www.securityfocus.com/bid/98905
CVE ID: CVE-2017-9375 State: PUBLISHED Published: 2017-06-16T22:00:00 Last Updated: 2024-08-05T17:02:44.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local guest OS privileged users to cause a denial of service (infinite recursive call) via vectors involving control transfer descriptors sequencing. Additional Analyst Notes: - CVE Program Container: References: - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=96d87bdda3919bb16f754b3d3fd1227e1f38f13c - http://www.securityfocus.com/bid/98915 - https://bugzilla.redhat.com/show_bug.cgi?id=1458744 - http://www.debian.org/security/2017/dsa-3991
focus.com/bid/98915 - https://bugzilla.redhat.com/show_bug.cgi?id=1458744 - http://www.debian.org/security/2017/dsa-3991 - https://access.redhat.com/errata/RHSA-2017:2392 - http://www.openwall.com/lists/oss-security/2017/06/05/2 - https://access.redhat.com/errata/RHSA-2017:2408 - https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html
CVE ID: CVE-2017-9376 State: PUBLISHED Published: 2019-03-25T15:53:20 Last Updated: 2024-08-05T17:02:44.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: ManageEngine ServiceDesk Plus before 9314 contains a local file inclusion vulnerability in the defModule parameter in DefaultConfigDef.do and AssetDefaultConfigDef.do. Additional Analyst Notes: - CVE Program Container: References: - https://labs.integrity.pt/advisories/cve-2017-9376/ - http://www.securityfocus.com/bid/107558
CVE ID: CVE-2017-9377 State: PUBLISHED Published: 2017-10-30T14:00:00 Last Updated: 2024-08-05T17:02:44.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/support/software/R33050020 - https://www.barco.com/en/Support/software/R33050037 - https://www.contextis.com/resources/advisories/cve-2017-9377 - http://www.securityfocu
m/en/Support/software/R33050037 - https://www.contextis.com/resources/advisories/cve-2017-9377 - http://www.securityfocus.com/bid/101617
CVE ID: CVE-2017-9378 State: PUBLISHED Published: 2017-06-02T15:00:00Z Last Updated: 2024-09-16T17:38:06.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: BigTree CMS through 4.2.18 does not prevent a user from deleting their own account. This could have security relevance because deletion was supposed to be an admin-only action, and the admin may have other tasks (such as data backups) to complete before a user is deleted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigtreecms/BigTree-CMS/issues/282 - https://github.com/bigtreecms/BigTree-CMS/commit/f7899701d7be91b7dc546b65e44a27b668eb3b76
CVE ID: CVE-2017-9379 State: PUBLISHED Published: 2017-06-02T15:00:00Z Last Updated: 2024-09-17T03:22:28.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple CSRF issues exist in BigTree CMS through 4.2.18 - the clear parameter to core\admin\modules\dashboard\vitals-statistics\404\clear.php and the from or to parameter to core\admin\modules\dashboard\vitals-statistics\404\create-301.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigtreecms/BigTree-CMS/issues/287
CVE ID: CVE-2017-9380 State: PUBLISHED Published: 2017-06-02T15:00:00 Last Updated: 2024-08-05T17:02:44.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code execution within the context of the vulnerable application. Additional Analyst Notes: - CVE Program Container: References: - https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-002 - http://packetstormsecurity.com/files/163087/OpenEMR-5.0.0-Remote-Shell-Upload.html - https://github.com/Hacker5preme/Exploits/tree/main/CVE-2017-9380-Exploit
CVE ID: CVE-2017-9381 State: PUBLISHED Published: 2019-06-17T17:27:34 Last Updated: 2024-08-05T17:02:44.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a user with the capability of installing or deleting apps on the device using the web management interface. It seems that the device does not implement any cross-site request forgery protection mechanism which allows an attacker to trick a user who navigates to an attacker controlled page to install or delete an application on the device. Note: The cross-site request forgery is a systemic issue across all other functionalities of
application on the device. Note: The cross-site request forgery is a systemic issue across all other functionalities of the device. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html - https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf
CVE ID: CVE-2017-9382 State: PUBLISHED Published: 2019-06-17T19:52:00 Last Updated: 2024-08-05T17:02:44.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be accessed via port 80 using the url "/port_3480". It seems that the UPnP services provide "file" as one of the service actions for a normal user to read a file that is stored under the /etc/cmh-lu folder. It retrieves the value from the "parameters" query string variable and then passes it to an internal function "FileUtils::ReadFileIntoBuffer" which is a library functio
ry string variable and then passes it to an internal function "FileUtils::ReadFileIntoBuffer" which is a library function that does not perform any sanitization on the value submitted and this allows an attacker to use directory traversal characters "../" and read files from other folders within the device. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html - https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf
CVE ID: CVE-2017-9383 State: PUBLISHED Published: 2019-06-17T19:41:42 Last Updated: 2024-08-05T17:02:44.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be accessed via port 80 using the url "/port_3480". It seems that the UPnP services provide "wget" as one of the service actions for a normal user to connect the device to an external website. It retrieves the parameter "URL" from the query string and then passes it to an internal function that uses the curl module on the device to retrieve the contents of the website. Add
n passes it to an internal function that uses the curl module on the device to retrieve the contents of the website. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html - https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf
CVE ID: CVE-2017-9384 State: PUBLISHED Published: 2019-06-17T17:06:52 Last Updated: 2024-08-05T17:02:44.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a web user interface that allows a user to manage the device. As a part of the functionality the device firmware file contains a file known as relay.sh which allows the device to create relay ports and connect the device to Vera servers. This is primarily used as a method of communication between the device and Vera servers so the devices can be communicated with even when the user is not at home. One of the parameters retrieved b
era servers so the devices can be communicated with even when the user is not at home. One of the parameters retrieved by this specific script is "remote_host". This parameter is not sanitized by the script correctly and is passed in a call to "eval" to execute another script where remote_host is concatenated to be passed a parameter to the second script. This allows an attacker to escape from the executed command and then execute any commands of his/her choice. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html - https://githu
/packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html - https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf
CVE ID: CVE-2017-9385 State: PUBLISHED Published: 2019-06-17T19:37:18 Last Updated: 2024-08-05T17:02:44.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Vera Veralite 1.7.481 devices. The device has an additional OpenWRT interface in addition to the standard web interface which allows the highest privileges a user can obtain on the device. This web interface uses root as the username and the password in the /etc/cmh/cmh.conf file which can be extracted by an attacker using a directory traversal attack, and then log in to the device with the highest privileges. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtr
with the highest privileges. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html - https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf