Memory corruption

2019-10-1221:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%

JSON

An issue was discovered on Belkin Wemo Switch 28B WW_2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service (persistent rules-processing outage) via a crafted ruleDbBody element in a StoreRules request to the upnp/control/rules1 URI, because database corruption occurs.

CPENameOperatorVersion
wemo_switch_28b_firmwareeqwemoww2.0.11057.pvtowrtsns

CPE	Name	Operator	Version
	wemo_switch_28b_firmware	eq	wemoww2.0.11057.pvtowrtsns

References

github.com/badnack/wemo_dos