VULNERABILITY INTELLIGENCE

CVE-2013-6949

CVSS score9.3 HIGH
EPSS probability1.87%
CISA KEVNot currently listed
Published2014-02-22
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

The Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and TURN protocols, which allows remote attackers to hijack connections and possibly have unspecified other impact by leveraging access to a single WeMo device.

Primary references