Vera Control VeraEdge

Security Grade

Calculator v1

   Brand: Vera Control (Parent: Ezlo Innovation)

   Category: Smart home controller • Model / Gen: VeraEdge (UI7) VeraEdge

   Release Date: 2014-12-01 • Status:

   Classification Date: 2026-10-25 • Official Website

Security Evaluation

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	🔗 Proof	Teardown and firmware access are possible, but the unit is normally indoors and not physically attacked.
Known vulnerabilities	Very common	[1] 🔗 Proof	Synopsys found unauthenticated command injection in proxy and relay services, XSRF, XSS and directory traversal. CVE-2019-13598 is unauthenticated RCE in LuaUPnP.
Prior attacks	Rare	🔗 Proof	Public research and exploit exist, but no public mass botnet campaign.
Updatability	Rare	🔗 Proof	Firmware 1.7.19 was current at the time of the 2019 advisory. The product is now discontinued and no longer receives regular updates.
Category Score	Score: 3 / 3

Criterion	Value	Proof	Comment
Authentication with other systems	No	🔗 Proof	LuaUPnP allows remote unauthenticated users to execute arbitrary OS commands.
Communications	Encrypted with obselete encryption	🔗 Proof	Web and API access is largely HTTP and some services lack transport protection.
Storage	Encrypted with obselete encryption	🔗 Proof	Configuration and user data are stored on the device without strong encryption and firmware access exposes them.
Category Score	Score: 3 / 3

Criterion	Value	Proof	Comment
Account management	Basic	🔗 Proof	User accounts exist, but no fine-grained role model is documented for VeraEdge.
Authentication	Basic	🔗 Proof	Password login exists, but multiple services bypass authentication entirely.
Brute-force protection	Basic	🔗 Proof	Standard account login, but no published device-level lockout policy.
Event logging	Partial logging	🔗 Proof	Device and scene history exist, but no complete access audit log is documented.
Passwords	Require change after setup	🔗 Proof	User sets the admin password and no factory default admin password is documented.
Category Score	Score: 2 / 3

Property	Details
Operating System & App	Vera UI7 (Linux-based) (Companion App: Vera Mobile / Ezlo app)
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: • Power: • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity: Ethernet, Wi-Fi, Z-Wave, USB
Physical (Dimensions & Mass)	Dimensions: • Mass: