Design/Logic Flaw

The Belkin WeMo Home Automation firmware before 3949 does not use SSL for the distribution feed, which allows man-in-the-middle attackers to install arbitrary firmware by spoofing a distribution server...

CVE-2013-6950

The Belkin WeMo Home Automation firmware before 3949 does not use SSL for the distribution feed, which allows man-in-the-middle attackers to install arbitrary firmware by spoofing a distribution server...

CVE-2013-6950

CVE-2013-6950 affects Belkin Wemo Home Automation firmware prior to 3949, where the distribution feed did not use SSL, enabling MITM-style firmware spoofing. The issue is mitigated by Belkin’s updates (firmware 3949 and SSL-enabled distribution feed) released in 2014, plus app updates, which add ...