CVE-2013-6951
7.1
Vector
AV:N/AC:M/Au:N/C:N/I:C/A:N
Exploitability: 8.6 / Impact: 6.9
Source: NVD
Description
The Belkin WeMo Home Automation firmware before 3949 does not maintain a set of Certification Authority public keys, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary X.509 certificate.
Affected (1)
Products: Belkin: Wemo Home Automation Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 2769 |
Related CWEs
References (4)
Source: cret@cert.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Timeline
No history available yet.