Belkin Wemo Home Automation Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Belkin Wemo Home Automation Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2013-6952 — CVSS 10.0 (critical): The Belkin WeMo Home Automation firmware before 3949 has a hardcoded GPG key, which makes it easier for remote attackers to spoof firmware…
• CVE-2013-6949 — CVSS 9.3 (critical): The Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and TURN protocols, which allows remote attackers to…
• CVE-2013-6948 — CVSS 7.8 (high): The peerAddresses API in the Belkin WeMo Home Automation firmware before 3949 allows remote attackers to read arbitrary files via an XML…
• CVE-2013-6950 — CVSS 7.8 (high): The Belkin WeMo Home Automation firmware before 3949 does not use SSL for the distribution feed, which allows man-in-the-middle attackers…
• CVE-2013-6951 — CVSS 7.1 (high): The Belkin WeMo Home Automation firmware before 3949 does not maintain a set of Certification Authority public keys, which allows…