CVE-2017-9386: Path Traversal
First published: Mon Jun 17 2019(Updated: )
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a script file called "get_file.sh" which allows a user to retrieve any file stored in the "cmh-ext" folder on the device. However, the "filename" parameter is not validated correctly and this allows an attacker to directory traverse outside the /cmh-ext folder and read any file on the device. It is necessary to create the folder "cmh-ext" on the device which can be executed by an attacker first in an unauthenticated fashion and then execute a directory traversal attack.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Getvera Vera Edge Firmware | <=1.7.19 | |
| Getvera Vera Edge | ||
| VeraLite Firmware | <=1.7.481 | |
| MiCasaVerde VeraLite |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-9386?
The severity of CVE-2017-9386 is medium with a CVSS score of 6.5.
How does CVE-2017-9386 affect Getvera VeraEdge Firmware version 1.7.19?
CVE-2017-9386 affects Getvera VeraEdge Firmware version 1.7.19 by allowing an attacker to retrieve any file stored in the "cmh-ext" folder on the device.
How does CVE-2017-9386 affect Getvera Veralite Firmware version 1.7.481?
CVE-2017-9386 affects Getvera Veralite Firmware version 1.7.481 by allowing an attacker to retrieve any file stored in the "cmh-ext" folder on the device.
Is Getvera VeraEdge vulnerable to CVE-2017-9386?
Getvera VeraEdge is vulnerable to CVE-2017-9386.
Is Getvera Veralite vulnerable to CVE-2017-9386?
Getvera Veralite is not vulnerable to CVE-2017-9386.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/severity
- agent/references
- agent/description
- agent/weakness
- agent/author
- agent/event
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/getvera
- canonical/getvera vera edge firmware
- version/getvera vera edge firmware/1.7.19
- canonical/getvera vera edge
- canonical/veralite firmware
- version/veralite firmware/1.7.481
- canonical/micasaverde veralite