PT-2014-3232

CVE-2013-6950

·

Published

2014-02-22

·

Updated

2014-03-06

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Belkin WeMo Home Automation firmware versions prior to 3949
Description The issue concerns the lack of SSL use for the distribution feed, allowing man-in-the-middle attackers to install arbitrary firmware by spoofing a distribution server.
Recommendations For versions prior to 3949, update to firmware version 3949 or later to resolve the issue.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-310
Related identifiers
CVE-2013-6950
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com