CVEvulnerability

CVE-2013-6948

7.8 HIGH Published 2014-02-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-02-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:N
Weaknesses
CWE-94

Description

The peerAddresses API in the Belkin WeMo Home Automation firmware before 3949 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected configurations

• belkin wemo home automation firmware 2769

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References