Lucene search
HistoryFeb 22, 2014 - 9:55 p.m.
CVE-2013-6949
cve-2013-6949
belkin wemo
home automation
firmware
stun
turn
remote attackers
hijack connections
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.8%
The Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and TURN protocols, which allows remote attackers to hijack connections and possibly have unspecified other impact by leveraging access to a single WeMo device.
Affected configurations
Node
belkinwemo_home_automation_firmwareMatch2769
| CPE | Name | Operator | Version |
|---|---|---|---|
| belkin:wemo_home_automation_firmware | belkin wemo home automation firmware | eq | 2769 |
Related
nvd
nvd
CVE-2013-6949
2014-02-22 21:55:09
prion
prion
Code injection
2014-02-22 21:55:00
seebug
seebug
Belkin Wemo Home Automation Devices远程安全限制绕过漏洞
2014-02-20 00:00:00
cvelist
cvelist
CVE-2013-6949
2014-02-22 21:00:00
cert
cert
Belkin Wemo Home Automation devices contain multiple vulnerabilities
2014-02-18 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
80.8%
Related for CVE-2013-6949