CVEvulnerability
CVE-2013-6949
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-02-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and TURN protocols, which allows remote attackers to hijack connections and possibly have unspecified other impact by leveraging access to a single WeMo device.
Affected configurations
• belkin wemo home automation firmware 2769
Related
Weakness · not in database (1)
References
- http://www.ioactive.com/pdfs/IOActive_Belkin-advisory-lite.pdf www.ioactive.com
- http://www.kb.cert.org/vuls/id/656302 US Government Resource
- http://www.ioactive.com/pdfs/IOActive_Belkin-advisory-lite.pdf www.ioactive.com
- http://www.kb.cert.org/vuls/id/656302 US Government Resource