Back to Database
Status published
High
CVE-2013-6948
The peerAddresses API in the Belkin WeMo Home Automation firmware...
Vulnerability Description
The peerAddresses API in the Belkin WeMo Home Automation firmware before 3949 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-6948
Credits & Attribution
No credits recorded in the NVD database.
References
More from belkin
View All →CVE-2022-30105
In Belkin N300 Firmware 1.00.08, the script located at /setting_hidden.asp,...
Critical
9.8
CVE-2021-25310
The administration web interface on Belkin Linksys WRT160NL 1.0.04.002_US_20130619 devices...
High
8.8
CVE-2020-26561
Belkin LINKSYS WRT160NL 1.0.04.002_US_20130619 devices have a stack-based buffer overflow...
High
8.8
CVE-2019-17532
An issue was discovered on Belkin Wemo Switch 28B WW_2.00.11057.PVT-OWRT-SNS...
High
7.5
CVE-2019-12780
The Belkin Wemo Enabled Crock-Pot allows command injection in the...
Critical
9.8
Affected Vendor
belkin
View all reports →Affected Software
wemo home automation firmware
Vulnerable Versions:
2769
Timeline
Official Publish:
February 22nd, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.