VulnerabilityModified
CVE-2023-33768
Incorrect signature verification of the firmware during the Device Firmware Update process of Belkin Wemo Smart Plug WSP080 v1.2 allows attackers to cause a Denial of Service (DoS) via a crafted firmware file.
MEDIUM 6.5EPSS 1.10%
Does this matter?
Lower severity and a low EPSS score (1.10%). Track it; it rarely justifies an emergency change on its own.
Description
Incorrect signature verification of the firmware during the Device Firmware Update process of Belkin Wemo Smart Plug WSP080 v1.2 allows attackers to cause a Denial of Service (DoS) via a crafted firmware file.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- EPSS
- 1.10% probability · 64th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-347
- Affected
- belkin/wemo smart plug wsp080 firmware
- Source
- cve@mitre.org
References
- https://github.com/purseclab/CVE-2023-33768Exploit, Third Party Advisory
- https://play.google.com/store/apps/details?id=com.belkin.wemoandroid&hl=en_US&gl=USProduct
- https://www.amazon.com/Control-Devices-Remotely-Assistant-HomeKit/dp/B08CJGZZZ1Product
- https://github.com/purseclab/CVE-2023-33768Exploit, Third Party Advisory
- https://play.google.com/store/apps/details?id=com.belkin.wemoandroid&hl=en_US&gl=USProduct
- https://www.amazon.com/Control-Devices-Remotely-Assistant-HomeKit/dp/B08CJGZZZ1Product
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.