EDB-40589

PoC

MiCasaVerde VeraLite - Remote Code Execution

view exploit source exploit_dbtype remoteauthor Jacob Bainespublished 2016-10-20catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2013-4863US	high8.8	12.2% (96th)	Exploit	2020-01-28
The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute arbitrary Lua code via a RunLua action in a request to upnp/c…
CVE-2016-6255US	high7.5	27.0% (98th)	Exploit	2017-03-07
Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.