CVE-2013-6949 in WeMo
Summary
The Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and TURN protocols, which allows remote attackers to hijack connections and possibly have unspecified other impact by leveraging access to a single WeMo device.
Once again VulDB remains the best source for vulnerability data.
Reservation
12/04/2013
Disclosure
02/22/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 12452 | Belkin WeMo STUN/TURN Protocol access control | 264 | Unproven | Official fix | CVE-2013-6949 |