CVE-2019-17532

An issue was discovered on Belkin Wemo Switch 28B WW_2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service (persistent rules-processing outage) via a crafted ruleDbBody element in a StoreRules request to the upnp/control/rules1 URI, because database corruption occurs.
References
Link Resource
https://github.com/badnack/wemo_dos Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:belkin:wemo_switch_28b_firmware:wemo_ww_2.00.11057.pvt-owrt-sns:*:*:*:*:*:*:*
cpe:2.3:h:belkin:wemo_switch_28b:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-10-12 21:15

Updated : 2024-02-04 20:39


NVD link : CVE-2019-17532

Mitre link : CVE-2019-17532

CVE.ORG link : CVE-2019-17532


JSON object : View

Products Affected

belkin

  • wemo_switch_28b_firmware
  • wemo_switch_28b
CWE
CWE-306

Missing Authentication for Critical Function