Vera 漏洞

时间轴

类型

Not Defined14

产品

Vera Veralite12
Vera VeraEdge11
Vera Edge Home Controller2

修正

Official Fix0
Temporary Fix0
Workaround1
Unavailable0
Not Defined13

易受攻击性

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined14

访问向量

Not Defined0
Physical0
Local0
Adjacent0
Network14

身份验证

Not Defined0
High0
Low8
None6

用户交互

Not Defined0
Required4
None10

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤51
≤63
≤71
≤86
≤93
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤51
≤63
≤71
≤86
≤93
≤100

VulDB

≤10
≤20
≤30
≤41
≤53
≤61
≤76
≤82
≤91
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤73
≤80
≤97
≤103

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k1
<2k12
<5k1
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k14
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (3): Home Controller (2), VeraEdge (11), Veralite (12)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2019-08-237.57.5Vera Edge Home Controller webcam.sh 权限升级未知Not DefinedNot Defined0.003910.02CVE-2019-15498
2019-07-148.58.5Vera Edge Home Controller LuaUPnP data_request 权限升级未知Not DefinedNot Defined0.032430.02CVE-2019-13598
2019-06-177.57.5Vera VeraEdge/Veralite UPnP Service port_3480 REQ_Image 内存损坏未知Not DefinedNot Defined0.016670.00CVE-2017-9392
2019-06-177.57.5Vera VeraEdge/Veralite UPnP Service port_3480 REQ_Image 内存损坏未知Not DefinedNot Defined0.016670.00CVE-2017-9391
2019-06-175.25.2Vera VeraEdge/Veralite connect.sh 跨网站脚本未知Not DefinedNot Defined0.005440.00CVE-2017-9390
2019-06-177.57.5Vera VeraEdge/Veralite Web User Interface RunLua 弱身份验证未知Not DefinedNot Defined0.038440.00CVE-2017-9389
2019-06-177.57.5Vera VeraEdge/Veralite Web User Interface proxy.sh eval 权限升级未知Not DefinedNot Defined0.020380.02CVE-2017-9388
2019-06-174.44.4Vera VeraEdge/Veralite Log File relay.sh 跨网站脚本未知Not DefinedNot Defined0.000530.00CVE-2017-9387
2019-06-175.95.9Vera VeraEdge/Veralite Script File get_file.sh 目录遍历未知Not DefinedNot Defined0.011340.00CVE-2017-9386
2019-06-178.98.9Vera Veralite OpenWRT Interface cmh.conf 权限升级未知Not DefinedNot Defined0.048350.02CVE-2017-9385

4 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 4 results.

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!