CVE-2013-6950

概要

参考情報

• ioactive.com/pdfs/IOActive_Belkin-advisory-lite.pdf
• kb.cert.org/vuls/id/656302 · US Government Resource

wemo home automation firmware のその他の脆弱性

• CVE-2013-6952緊急 10.0The Belkin WeMo Home Automation firmware before 3949 has a hardcoded GPG key, which makes it easier for remote attackers to spoof firmware u…
• CVE-2013-6951高 7.1The Belkin WeMo Home Automation firmware before 3949 does not maintain a set of Certification Authority public keys, which allows man-in-the…
• CVE-2013-6949緊急 9.3The Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and TURN protocols, which allows remote attackers to hij…
• CVE-2013-6948高 7.8The peerAddresses API in the Belkin WeMo Home Automation firmware before 3949 allows remote attackers to read arbitrary files via an XML doc…