CVE-2013-4862: Micasaverde Veralite Firmware

High severity, CVSS 8.1. EPSS: 3.7% chance of exploitation in the next 30 days.

MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to (1) update the firmware via the squashfs parameter to upgrade_step2.sh or (2) obtain hashed passwords via the cgi-bin/cmh/backup.sh page.

Affected products

• Micasaverde Veralite Firmware: version 1.5.408 only

Published 2020-01-28. Last modified 2026-06-16.