CVE:CVE-2017-9386
CNNVD:CNNVD-201706-122
Vera VeraEdge 1.7.19版本和Veralite 1.7.481版本中存在安全漏洞，该漏洞源于程序没有正确验证‘filename’参数。攻击者可利用漏洞遍历/cmh-ext文件夹之外的目录并读取任意文件。
solution:Upgrade getvera veraedge_firmware to a higher version than 1.7.19,and avoid the version (,1.7.19]; Upgrade getvera veralite_firmware to a higher version than 1.7.481,and avoid the version (,1.7.481]