NVD

Id
41793  
Name
CVE-2013-6948  
Description
The peerAddresses API in the Belkin WeMo Home Automation firmware before 3949 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-18  
Published
2014-02-22  
Modified Date
2014-03-05  
Seq
2013-6948  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
211117 41793 CVE-2013-6948 http://www.ioactive.com/pdfs/IOActive_Belkin-advisory-lite.pdf  View
211118 41793 CVE-2013-6948 VU#656302  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24493 JVNDB-2013-006068 Belkin WeMo Home Automation ファームウェアの peerAddresses API における XML インジェクション攻撃を実行される脆弱性 Belkin WeMo Home Automation ファームウェアの peerAddresses API には、XML インジェクション攻撃を実行される、および任意のファイルを読まれる脆弱性が存在します。 CVE-2013-6948 66890 CVE-2013-6948 41793 7.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006068.html 2013-12-04 2014-02-25 View