CVE-2019-13598

n/a / n/a PUBLISHED

Description (CNA)

LuaUPnP in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via the code parameter to /port_3480/data_request because the "No unsafe lua allowed" code block is skipped.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://distributedcompute.com/2019/07/13/vera-edge-home-controller-rce-via-unauthenticated-command-injection/

ADP enrichment

CVE

No English description supplied.

https://distributedcompute.com/2019/07/13/vera-edge-home-controller-rce-via-unauthenticated-command-injection/