Vulnerability in Belkin Wemo Home Automation Firmware

CVE-2013-6949

The Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and TURN protocols, which allows remote attackers to hijack connections and possibly have unspecified other impact by leveraging access to a single WeMo device.

EPSS: 0.019 (77.1th percentile) — read the EPSS interpretation.

Affected products

Belkin Wemo_home_automation_firmware — versions 2769
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cret@cert.org (x_refsource_MISC)
cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)