Lucene search
HistoryFeb 22, 2014 - 9:55 p.m.
CVE-2013-6948
belkin
wemo
home automation
firmware
security vulnerability
remote attack
xml
xxe
cve-2013-6948
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
7 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.9%
The peerAddresses API in the Belkin WeMo Home Automation firmware before 3949 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Affected configurations
Node
belkinwemo_home_automation_firmwareMatch2769
| CPE | Name | Operator | Version |
|---|---|---|---|
| belkin:wemo_home_automation_firmware | belkin wemo home automation firmware | eq | 2769 |
Related
prion
prion
Xxe
2014-02-22 21:55:00
cvelist
cvelist
CVE-2013-6948
2014-02-22 21:00:00
seebug
seebug
Belkin Wemo Home Automation 'peerAddresses' API XML外部实体注入漏洞
2014-02-20 00:00:00
nvd
nvd
CVE-2013-6948
2014-02-22 21:55:09
cert
cert
Belkin Wemo Home Automation devices contain multiple vulnerabilities
2014-02-18 00:00:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
7 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.9%
Related for CVE-2013-6948