NVD

Id
41796  
Name
CVE-2013-6951  
Description
The Belkin WeMo Home Automation firmware before 3949 does not maintain a set of Certification Authority public keys, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary X.509 certificate.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:C/A:N)  
Pub Date
2017-01-18  
Published
2014-02-22  
Modified Date
2014-02-24  
Seq
2013-6951  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
211123 41796 CVE-2013-6951 http://www.ioactive.com/pdfs/IOActive_Belkin-advisory-lite.pdf  View
211124 41796 CVE-2013-6951 VU#656302  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24496 JVNDB-2013-006071 Belkin WeMo Home Automation ファームウェアにおける SSL サーバになりすまされる脆弱性 Belkin WeMo Home Automation ファームウェアは、Certification Authority 公開鍵のセットを管理しないため、SSL サーバになりすまされる脆弱性が存在します。 CVE-2013-6951 66893 CVE-2013-6951 41796 7.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006071.html 2013-12-04 2014-02-25 View