3 matches found
CVE-2013-6948
The peerAddresses API in the Belkin WeMo Home Automation firmware before 3949 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
CVE-2013-6948
The Belkin Wemo WeMo API server firmware prior to 3949 is affected by an XML External Entity (XXE) vulnerability in the peerAddresses API, allowing remote attackers to read arbitrary device files via an XML document containing an external entity declaration and a reference. Impact is remote, unau...
CVE-2013-6948
The peerAddresses API in the Belkin WeMo Home Automation firmware before 3949 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...