CVE-2013-6949

2014-02-2221:00:00

certcc

www.cve.org

7.3 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.8%

JSON

The Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and TURN protocols, which allows remote attackers to hijack connections and possibly have unspecified other impact by leveraging access to a single WeMo device.

References

www.ioactive.com/pdfs/IOActive_Belkin-advisory-lite.pdf

www.kb.cert.org/vuls/id/656302