PT-2014-3231 · Belkin · Wemo

Published 2014-02-22 · Updated 2014-03-06 · CVE-2013-6949

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Belkin WeMo Home Automation firmware versions prior to 3949

Description The issue concerns the improper use of the STUN and TURN protocols, allowing remote attackers to hijack connections and potentially have other unspecified impacts by gaining access to a single WeMo device.

Recommendations For versions prior to 3949, update the firmware to version 3949 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-6949

Affected Products

Wemo

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-6949 · Security Note
• http://kb.cert.org/vuls/id/656302 · Note
• http://ioactive.com/pdfs/IOActive_Belkin-advisory-lite.pdf · Note