CVE-2019-17094 Stack-Based Overflow vulnerability in Belkin WeMo Insights Switch

A Stack-based Buffer Overflow vulnerability in libbelkinapi.so component of Belkin WeMo Insight Switch firmware allows a local attacker to obtain code execution on the device. This issue affects: Belkin WeMo Insight Switch firmware version 2.00.11396 and prior versions...

CVE-2019-17094

The CVE-2019-17094 entry documents a Stack-based buffer overflow in the Belkin WeMo Insight Switch firmware, specifically in the libbelkin_api.so component. Affected: Belkin WeMo Insight Switch firmware version 2.00.11396 and prior. Root cause: a stack overflow allows a local attacker to achieve ...

CVE-2019-17094: Stack-based Buffer Overflow

A Stack-based Buffer Overflow vulnerability in libbelkinapi.so component of Belkin WeMo Insight Switch firmware allows a local attacker to obtain code execution on the device. This issue affects: Belkin WeMo Insight Switch firmware version 2.00.11396 and prior versions...

PT-2020-9868

Name of the Vulnerable Software and Affected Versions Belkin WeMo Insight Switch firmware versions prior to 2.00.11396 Description A Stack-based Buffer Overflow issue in the libbelkin api.so component of the firmware allows a local attacker to obtain code execution on the device. Recommendations...

Belkin Wemo UPnP Remote Code Execution

A remote code execution vulnerability is exists in Belkin Wemo UPnP. A remote attacker can exploit this issue by sending a specially crafted packet to the target server. Successful exploitation could result in execution of arbitrary code on the affected system...

Belkin Wemo Switch 28B Input Validation Error Vulnerability

The Belkin Wemo Switch 28B is a smart outlet device from Belkin USA. A security vulnerability exists in the Belkin Wemo Switch 28B WW2.00.11057.PVT-OWRT-SNS version. A remote attacker can exploit this vulnerability to cause a denial of service by sending a StoreRules request with a specially...

CVE-2019-17532

An issue was discovered on Belkin Wemo Switch 28B WW2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service persistent rules-processing outage via a crafted ruleDbBody element in a StoreRules request to the upnp/control/rules1 URI, because database corruption...

CVE-2019-17532

An issue was discovered on Belkin Wemo Switch 28B WW2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service persistent rules-processing outage via a crafted ruleDbBody element in a StoreRules request to the upnp/control/rules1 URI, because database corruption...

Memory corruption

An issue was discovered on Belkin Wemo Switch 28B WW2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service persistent rules-processing outage via a crafted ruleDbBody element in a StoreRules request to the upnp/control/rules1 URI, because database corruption...

CVE-2019-17532

Belkin Wemo Switch 28B (WW_2.00.11057.PVT-OWRT-SNS) is affected by CVE-2019-17532. A remote attacker can trigger a denial of service (persistent rules-processing outage) by sending a specially crafted ruleDbBody in a StoreRules request to the upnp/control/rules1 URI, causing database corruption. ...

CVE-2019-17532

An issue was discovered on Belkin Wemo Switch 28B WW2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service persistent rules-processing outage via a crafted ruleDbBody element in a StoreRules request to the upnp/control/rules1 URI, because database corruption...

CVE-2019-17532: Missing Authentication for Critical Function

An issue was discovered on Belkin Wemo Switch 28B WW2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service persistent rules-processing outage via a crafted ruleDbBody element in a StoreRules request to the upnp/control/rules1 URI, because database corruption...

PT-2019-15190

Name of the Vulnerable Software and Affected Versions Belkin Wemo Switch version 28B WW 2.00.11057.PVT-OWRT-SNS Description The issue allows remote attackers to cause a denial of service, resulting in a persistent rules-processing outage. This is achieved by sending a crafted ruleDbBody element i...

VulnCheck KEV: CVE-2019-12780

The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action. A simple POST request to /upnp/control/basicevent1 can allow an attacker to execute commands without authentication...

Command injection

The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action. A simple POST request to /upnp/control/basicevent1 can allow an attacker to execute commands without authentication...

CVE-2019-12780

The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action. A simple POST request to /upnp/control/basicevent1 can allow an attacker to execute commands without authentication...

CVE-2019-12780

The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action. A simple POST request to /upnp/control/basicevent1 can allow an attacker to execute commands without authentication...

CVE-2019-12780

CVE-2019-12780 affects Belkin Wemo UPnP API used by the Crock-Pot, where the SetSmartDevInfo action accepts a SmartDevURL that can be abused to inject commands. A simple POST to /upnp/control/basicevent1 without authentication can execute arbitrary commands on the device. Public references in the...

CVE-2019-12780: Improper Neutralization of Special Elements used in an OS Command

The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action. A simple POST request to /upnp/control/basicevent1 can allow an attacker to execute commands without authentication...

PT-2019-12940

Name of the Vulnerable Software and Affected Versions Belkin Wemo Enabled Crock-Pot affected versions not specified Description The issue concerns command injection in the Wemo UPnP API. Specifically, it affects the SmartDevURL argument to the SetSmartDevInfo action. An attacker can exploit this ...