CVE-2013-6952 The Belkin WeMo Home Automation firmware before 3949 has a hardcoded GPG key, which makes it easier for remote attackers to spoof firmware updates and execute arbitrary code via crafted signed data.
HighCVSS 10.0
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Belkin WeMo Home Automation firmware before 3949 has a hardcoded GPG key, which makes it easier for remote attackers to spoof firmware updates and execute arbitrary code via crafted signed data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| belkin wemo home automation firmware | = 2769 | No fix listed |
References
- www.ioactive.com
- VU#656302 third-party-advisory us-government-resource