Xxe

2014-02-2221:55:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.9%

JSON

The peerAddresses API in the Belkin WeMo Home Automation firmware before 3949 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

CPENameOperatorVersion
wemo_home_automation_firmwareeq2769

CPE	Name	Operator	Version
	wemo_home_automation_firmware	eq	2769

References

www.kb.cert.org/vuls/id/656302

www.ioactive.com/pdfs/IOActive_Belkin-advisory-lite.pdf