CVE-2019-17532
High
Description
An issue was discovered on Belkin Wemo Switch 28B WW_2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service (persistent rules-processing outage) via a crafted ruleDbBody element in a StoreRules request to the upnp/control/rules1 URI, because database corruption occurs.
SeverityHigh
CVSS7.5
Exploit probability—
ProductBelkin Wemo Switch 28b Firmware
PublishedOct 12, 2019
First seenOct 12, 2019
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| belkin wemo_switch_28b_firmware | wemo_ww_2.00.11057.pvt-owrt-sns | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.