CVE-2013-6952

概要

参考情報

• ioactive.com/pdfs/IOActive_Belkin-advisory-lite.pdf
• kb.cert.org/vuls/id/656302 · US Government Resource

wemo home automation firmware のその他の脆弱性

• CVE-2013-6951高 7.1The Belkin WeMo Home Automation firmware before 3949 does not maintain a set of Certification Authority public keys, which allows man-in-the…
• CVE-2013-6950高 7.8The Belkin WeMo Home Automation firmware before 3949 does not use SSL for the distribution feed, which allows man-in-the-middle attackers to…
• CVE-2013-6949緊急 9.3The Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and TURN protocols, which allows remote attackers to hij…
• CVE-2013-6948高 7.8The peerAddresses API in the Belkin WeMo Home Automation firmware before 3949 allows remote attackers to read arbitrary files via an XML doc…