Security Advisory

CVE-2013-4865

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-01-28 16:09:26
Last updated 2024-08-06 16:59:41
Assigner mitre
State PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in upgrade_step2.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to hijack the authentication of users for requests that install arbitrary firmware via the squashfs parameter.