CVE-2017-9385

An issue was discovered on Vera Veralite 1.7.481 devices. The device has an additional OpenWRT interface in addition to the standard web interface which allows the highest privileges a user can obtain on the device. This web interface uses root as the username and the password in the /etc/cmh/cmh.conf file which can be extracted by an attacker using a directory traversal attack, and then log in to the device with the highest privileges.

CVSS v3.0 NVD

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

3.54% chance of exploitation in the next 30 days, 89th percentile

Published

2019-06-17

Updated

2024-08-05

Proof-of-concept exploits (1)

• ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf23★ · 2021-07-24

Security advisories

• http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injectio…
• https://seclists.org/bugtraq/2019/Jun/8

References

• CVE Record
• NVD entry

Related

• CVE-2017-10718
• CVE-2017-10719
• CVE-2017-10720
• CVE-2017-10721
• CVE-2017-10722
• CVE-2017-10723