CVE-2023-33768

CVE-2023-33768 설명 Belkin Wemo Smart Plug WSP080 v1.2의 장치 펌웨어 업데이트 과정에서 펌웨어 서명 검증이 올바르게 이루어지지 않아, 공격자가 조작된 펌웨어 파일을 통해 서비스 거부DoS를 유발할 수 있습니다. 추가 정보 모바일 애플리케이션을 통해 Wemo 스마트 플러그의 펌웨어를 업데이트할 때, 스마트 플러그 펌웨어 바이너리의 펌웨어 서명이 유효하지 않으면 Wemo 스마트 플러그가 응답을 멈추고벽돌 상태가 됨 동작하지 않게 되는 것을 발견했습니다. Wemo Android...

CVE-2023-33768

CVE-2023-33768 説明 Belkin Wemo Smart Plug WSP080 v1.2 のデバイス ファームウェア更新プロセス中のファームウェアの署名検証の不備により、 攻撃者は細工されたファームウェアファイルを介して サービス拒否 DoS を引き起こすことができます。 追加情報 Wemo スマートプラグをモバイルアプリ経由でファームウェア更新する際、スマートプラグのファームウェアバイナリのファームウェア署名が無効な場合、Wemo スマートプラグが応答しなくなる（文鎮化する）可能性があることを発見しました。 Wemo Android アプリ...

CVE-2025-66974

An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service DoS or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase...

CVE-2025-66974: Improper Input Validation

An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service DoS or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase...

EUVD-2025-210914

An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service DoS or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase...

PT-2026-92138

An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service DoS or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase...

CVE-2025-66974

An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service DoS or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase...

CVE-2025-66974

An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service DoS or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase...

CVE-2025-66974

The Prolink 13A Smart Plug (Model Version: DS-3202M-UKv3 Wi-Fi) and the mEzee application (Version 2.6.7 ) are vulnerable to an issue that allows attackers to cause a Denial of Service (DoS) or force a connection to an attacker-controlled device. This vulnerability is triggered by supplying a cra...

EUVD-2019-6680

Malware in sbrugna...

EUVD-2023-37920

Malicious code in bioql PyPI...

EUVD-2023-40140

Malicious code in bioql PyPI...

EUVD-2023-40139

Malicious code in bioql PyPI...

CVE-2025-8627 Unauthenticated Protocol Commands on TP-Link KP303

The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak. This issue affects TP-Link KP303 US Smartplug: before 1.1.0...

CVE-2023-36161

An issue was discovered in Qubo Smart Plug 10A version HSP02010114SYSTEM-10A, allows attackers to cause a denial of service DoS via Wi-Fi deauthentication...

CVE-2019-15745

The Eques elf smart plug and the mobile app use a hardcoded AES 256 bit key to encrypt the commands and responses between the device and the app. The communication happens over UDP port 27431. An attacker on the local network can use the same key to encrypt and send commands to discover all smart...

CVE-2024-46040

IoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration. The lack of validation of the authentication token at the IoT Haat during the Access Point Pairing mode leads the attacker to replay the Wi-Fi packets and forcefully turn off the access point after t...

CVE-2024-46041

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...

CVE-2024-46041

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...

CVE-2024-46040

The IoT Haat Smart Plug IH-IN-16A-S (version v5.16.1 ) is vulnerable to Insufficient Session Expiration . The root cause is a lack of validation for authentication tokens during the Access Point Pairing mode. An attacker can exploit this by replaying captured Wi-Fi packets to forcefully turn off ...