PT-2020-7420 · Belkin · Belkin Wemo Switch

Daniel Buentello · Published 2020-01-28 · Updated 2020-02-05 · CVE-2013-2748

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Belkin Wemo Switch versions prior to WeMo US 2.00.2176.PVT

Description: The issue allows remote attackers to upload arbitrary files onto the system.

Recommendations: For versions prior to WeMo US 2.00.2176.PVT, update to WeMo US 2.00.2176.PVT or later to resolve the issue.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2013-2748

Affected Products

Belkin Wemo Switch

References · 5

• 🔥 https://exploit-db.com/exploits/24924 · Exploit
• 🔥 http://exploit-db.com/exploits/24924 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-2748 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83296 · Note
• http://securityfocus.com/bid/58929 · Note