CVE-2017-9387: XSS
First published: Mon Jun 17 2019(Updated: )
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a shell script called relay.sh which is used for creating new SSH relays for the device so that the device connects to Vera servers. All the parameters passed in this specific script are logged to a log file called log.relay in the /tmp folder. The user can also read all the log files from the device using a script called log.sh. However, when the script loads the log files it displays them with content-type text/html and passes all the logs through the ansi2html binary which converts all the character text including HTML meta-characters correctly to be displayed in the browser. This allows an attacker to use the log files as a storing mechanism for the XSS payload and thus whenever a user navigates to that log.sh script, it enables the XSS payload and allows an attacker to execute his malicious payload on the user's browser.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Getvera Vera Edge Firmware | <=1.7.19 | |
| Getvera Vera Edge | ||
| VeraLite Firmware | <=1.7.481 | |
| MiCasaVerde VeraLite |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2017-9387?
CVE-2017-9387 is a vulnerability found in Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices that allows unauthorized access to sensitive information.
How does CVE-2017-9387 affect Getvera VeraEdge Firmware 1.7.19?
CVE-2017-9387 affects Getvera VeraEdge Firmware 1.7.19 by allowing an attacker to log sensitive information passed in the relay.sh script.
How does CVE-2017-9387 affect Getvera Veralite Firmware 1.7.481?
CVE-2017-9387 affects Getvera Veralite Firmware 1.7.481 by allowing an attacker to log sensitive information passed in the relay.sh script.
What is the severity of CVE-2017-9387?
CVE-2017-9387 has a severity rating of medium with a CVSS score of 5.4.
How can I fix CVE-2017-9387?
To fix CVE-2017-9387, it is recommended to update the firmware of the affected Vera devices to a non-vulnerable version.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/getvera
- canonical/getvera vera edge firmware
- version/getvera vera edge firmware/1.7.19
- canonical/getvera vera edge
- canonical/veralite firmware
- version/veralite firmware/1.7.481
- canonical/micasaverde veralite