PT-2014-3231 · Belkin · Wemo

Publicado 2014-02-22 · Atualizado 2014-03-06 · CVE-2013-6949

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Belkin WeMo Home Automation firmware versions prior to 3949

Description The issue concerns the improper use of the STUN and TURN protocols, allowing remote attackers to hijack connections and potentially have other unspecified impacts by gaining access to a single WeMo device.

Recommendations For versions prior to 3949, update the firmware to version 3949 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-6949

Produtos afetados

Wemo

Referências · 3

• http://kb.cert.org/vuls/id/656302 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-6949 · Nota de Segurança
• http://ioactive.com/pdfs/IOActive_Belkin-advisory-lite.pdf · Nota