PT-2014-3232 · Belkin · Belkin Wemo Home Automation

Publicado 2014-02-22 · Atualizado 2014-03-06 · CVE-2013-6950

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Belkin WeMo Home Automation firmware versions prior to 3949

Description The issue concerns the lack of SSL use for the distribution feed, allowing man-in-the-middle attackers to install arbitrary firmware by spoofing a distribution server.

Recommendations For versions prior to 3949, update to firmware version 3949 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2013-6950

Produtos afetados

Belkin Wemo Home Automation

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-6950 · Nota de Segurança
• http://kb.cert.org/vuls/id/656302 · Nota
• http://ioactive.com/pdfs/IOActive_Belkin-advisory-lite.pdf · Nota