Lucene search
HistoryFeb 22, 2014 - 9:55 p.m.
CVE-2013-6950
belkin wemo
home automation
firmware
ssl
man-in-the-middle
attack
distribution feed
vulnerability
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
41.9%
The Belkin WeMo Home Automation firmware before 3949 does not use SSL for the distribution feed, which allows man-in-the-middle attackers to install arbitrary firmware by spoofing a distribution server.
Affected configurations
Node
belkinwemo_home_automation_firmwareMatch2769
| CPE | Name | Operator | Version |
|---|---|---|---|
| belkin:wemo_home_automation_firmware | belkin wemo home automation firmware | eq | 2769 |
Related
prion
prion
Design/Logic Flaw
2014-02-22 21:55:00
cvelist
cvelist
CVE-2013-6950
2014-02-22 21:00:00
seebug
seebug
Belkin Wemo Home Automation中间人信息泄露漏洞
2014-02-20 00:00:00
nvd
nvd
CVE-2013-6950
2014-02-22 21:55:09
cert
cert
Belkin Wemo Home Automation devices contain multiple vulnerabilities
2014-02-18 00:00:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
41.9%
Related for CVE-2013-6950