Security Vulnerability in Smart Electric Outlets

A security vulnerability in Belkin's Wemo Insight "smartplugs" allows hackers to not only take over the plug, but use it as a jumping-off point to attack everything else on the network. From the Register: The bug underscores the primary risk posed by IoT devices and connected appliances. Because...

Belkin Wemo Insight Smart Plug Stack Buffer Overflow Vulnerability

Belkin Wemo Insight Smart Plug is a smart plug device from Belkin USA. A stack buffer overflow vulnerability exists in the libUPnPHndlr.so file in the Belkin Wemo Insight Smart Plug. A remote attacker can exploit this vulnerability to bypass local security protections with the help of specially...

CVE-2018-6692

Stack-based Buffer Overflow vulnerability in libUPnPHndlr.so in Belkin Wemo Insight Smart Plug allows remote attackers to bypass local security protection via a crafted HTTP post packet...

CVE-2018-6692

CVE-2018-6692 describes a stack-based buffer overflow in Belkin’s Wemo Insight Smart Plug, specifically in the library libUPnPHndlr.so. The flaw can be triggered by crafting an HTTP POST to UPnP endpoints (notably through the EnergyPerUnitCostVersion field inside a SOAP/UPnP payload), leading to ...

CVE-2018-6692 Wemo Insight Smart Plug - Remote Code Execution vulnerability

Stack-based Buffer Overflow vulnerability in libUPnPHndlr.so in Belkin Wemo Insight Smart Plug allows remote attackers to bypass local security protection via a crafted HTTP post packet...

PT-2018-17716 · Belkin · Belkin Wemo Insight Smart Plug

Name of the Vulnerable Software and Affected Versions: Belkin Wemo Insight Smart Plug affected versions not specified Description: The issue allows remote attackers to bypass local security protection via a crafted HTTP post packet, specifically exploiting a Stack-based Buffer Overflow...

Belkin WeMo Insight Switch Detection via SSDP

Binary data 700292.prm...

Belkin WeMo Link Detection via SSDP

Binary data 700293.prm...

Belkin WeMo Switch Smart Plug Detection via SSDP

Binary data 700294.prm...

SQLi, XSS zero-days expose Belkin IoT devices, Android smartphones

LONDON, UK – Research director Scott Tenaglia and lead research engineer Joe Tanen detailed the vulnerabilities during their ‘Breaking BHAD: Abusing Belkin Home Automation devices’ talk at the Black Hat Europe conference in London last Friday. The zero-day flaws specifically relate to Belkin’s...

(0Day) Belkin Wemo Link and Smart Plug UPNP changeFriendlyName Buffer Overflow Denial of Service Vulnerability

This vulnerability allows attackers on the local network to create a denial-of-service condition on the Belkin Wemo Link and Smart Plug device, despite factory resets. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML parsing in the...

(0Day) Belkin Wemo Link syseventd Missing Authentication for Critical Function Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Belkin Wemo Link. Authentication is not required to exploit this vulnerability. The specific flaw exists within the syseventd daemon, which listens on TCP port 52367 by default. The issue results...

Belkin WeMo XML Detection

Binary data 700207.prm...

Belkin WeMo Type Detection

Binary data 700210.prm...

Belkin WeMo Firmware Version Detection

Binary data 700209.prm...

Belkin WeMo Model Description Detection

Binary data 700208.prm...

Belkin WeMo Device Detection (HTTP)

Detection of Belkin WeMo devices. The script sends a connection request to the server and attempts to detect Belkin WeMo devices and to extract its firmware version. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Belkin WeMo Switch Access Vulnerability

It is possible for an unauthenticated remote attacker to switch the Belkin WeMo Switch on and off. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Belkin's WeMo Gear Can Hack Android Phones

A SQL injection vulnerability is present in Belkin’s WeMo home automation firmware that could allow a third party with local access to a network to gain root access to devices such as light switches, lightbulbs, security cameras and coffee makers. Researchers at Invincea Labs, who discovered the...

Embedded Hardware Hacking 101 – The Belkin WeMo Link

Why Embedded Hacking? Devices that are connected to the Internet or run a full operating system are becoming more and more prevalent in today’s society. From devices for locomotives to wireless light switches, the Internet of Things IoT trend is on the rise and here to stay. This has the potentia...