CVE-2019-13598

PoC —

CVSS 3.0

9.8 critical

EPSS

4%p90

Published

Jul 14, 2019 (Jul 14, 2019)

Modified

Jun 17, 2026

Description

LuaUPnP in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via the code parameter to /port_3480/data_request because the "No unsafe lua allowed" code block is skipped.

Vendors: getvera
Products: vera edge firmware
Weakness: CWE-78
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.2%)

In the news0 stories

No ingested article mentions this CVE yet.