Xxe

The peerAddresses API in the Belkin WeMo Home Automation firmware before 3949 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

PT-2014-3230

Name of the Vulnerable Software and Affected Versions Belkin WeMo Home Automation firmware versions prior to 3949 Description The issue concerns an XML External Entity XXE problem, allowing remote attackers to read arbitrary files. This is achieved by using an XML document that contains an extern...

CVE-2013-6948: Improper Control of Generation of Code

The peerAddresses API in the Belkin WeMo Home Automation firmware before 3949 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...