Advisories · Technology
Calero VeraSMART.
Every CVE that names Calero VeraSMART among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.5 High
Calero VeraSMART < 2026 R1 Hardcoded Static AES Keys Allow Decryption of Service Credentials
- Calero VeraSMART
- Hard-coded credentials
- CVSS 10.0 CriticalCritical · CVSS 9+
Calero VeraSMART < 2022 R1 .NET Remoting Arbitrary File Read Leading to ViewState RCE
- Calero VeraSMART
- Authentication bypass
- Insecure deserialization
- CVSS 9.3 CriticalCritical · CVSS 9+
Calero VeraSMART < 2022 R1 Static IIS Machine Keys Enable ViewState RCE
- Calero VeraSMART
- Hard-coded credentials