Code injection

2014-02-2221:55:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.8%

JSON

The Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and TURN protocols, which allows remote attackers to hijack connections and possibly have unspecified other impact by leveraging access to a single WeMo device.

CPENameOperatorVersion
wemo_home_automation_firmwareeq2769

CPE	Name	Operator	Version
	wemo_home_automation_firmware	eq	2769

References

www.kb.cert.org/vuls/id/656302

www.ioactive.com/pdfs/IOActive_Belkin-advisory-lite.pdf