Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Belkin Component: Wemo Home Automation Firmware Clear all filters
TI-2013-05712 CVE-2013-6951 · GHSA-vj4w-wqvm-gq69

The Belkin WeMo Home Automation firmware before 3949 does not maintain a set of…

Priority LOW 32

The Belkin WeMo Home Automation firmware before 3949 does not maintain a set of Certification Authority public keys, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary X.509 certificate.

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.00622 Published 2014-02-22 No fix listed CWE-310
TI-2013-05711 CVE-2013-6950 · GHSA-2785-j6r6-hrgf

The Belkin WeMo Home Automation firmware before 3949 does not use SSL for the…

Priority LOW 36

The Belkin WeMo Home Automation firmware before 3949 does not use SSL for the distribution feed, which allows man-in-the-middle attackers to install arbitrary firmware by spoofing a distribution server.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01146 Published 2014-02-22 No fix listed CWE-310
TI-2013-05710 CVE-2013-6949 · GHSA-m5gm-p83p-6vg3

The Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and…

Priority MEDIUM 44

The Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and TURN protocols, which allows remote attackers to hijack connections and possibly have unspecified other impact by leveraging access…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.01866 Published 2014-02-22 No fix listed CWE-264