Belkin Wemo Home Automation Devices Remote Security Restriction Bypass Vulnerability

Release date:
Updated on:

Affected Systems:
Belkin Wemo Home Automation
Description:
--------------------------------------------------------------------------------
Bugtraq id: 65632
CVE (CAN) ID: CVE-2013-6949

Belkin Wemo Home Automation devices is a series of Home Appliance Remote Control Products.

The Belkin Wemo Home Automation device uses the STUN & TURN protocol, which allows attackers who control a Wemo device to use the STUN & TURN protocol to relay to connect to other Wemo devices.

<* Source: Mike Davis

Link: http://www.kb.cert.org/vuls/id/656302
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Belkin
------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.belkin.com/us/Products/home-automation/c/wemo-home-automation