MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to send HTTP requests to intranet servers via the url parameter to cgi-bin/cmh/proxy.sh, related to a Server-Side Request Forgery (SSRF) issue.
MiCasaVerde VeraLite with firmware
Exploit
CVE-2013-4864
NVD
Refer to CVE-2013-4864 NVD advisory