Exploitation Summary
CVE-2013-4863 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 3 public exploits from researchers including Trustwave's SpiderLabs, Jacob Baines.
AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in MiCasaVerde VeraLite, including path traversal, insufficient authorization checks, and CSRF. It provides proof-of-concept code for arbitrary file disclosure, privilege escalation via firmware updates, and remote code execution through Lua code injection.
Description
The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute arbitrary Lua code via a RunLua action in a request to upnp/control/hag on port 49451 or (2) remote authenticated users to execute arbitrary Lua code via a RunLua action in a request to port_49451/upnp/control/hag.
Exploits (3)
The exploit demonstrates multiple vulnerabilities in MiCasaVerde VeraLite, including path traversal, insufficient authorization checks, and CSRF. It provides proof-of-concept code for arbitrary file disclosure, privilege escalation via firmware updates, and remote code execution through Lua code injection.
This HTML-based exploit leverages CVE-2013-4863 and CVE-2016-6255 to achieve remote code execution on MiCasa VeraLite devices by exploiting a vulnerable libupnp server and executing a reverse shell via Lua code injection.
This repository contains a functional exploit PoC for CVE-2013-4863, leveraging a combination of UPnP vulnerabilities (CVE-2013-4863 and CVE-2016-6255) and WebRTC IP leakage to achieve remote code execution on VeraLite devices. The exploit involves creating a malicious file via UPnP, bypassing same-origin policy, and executing a reverse shell.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H