What is CVE-2019-12780?

CVE-2019-12780 is a vulnerability found in the Belkin Wemo Enabled Crock-Pot that allows command injection through the Wemo UPnP API.

How severe is CVE-2019-12780?

CVE-2019-12780 has a severity rating of 9.8, which is considered critical.

How does CVE-2019-12780 work?

CVE-2019-12780 allows an attacker to execute commands without authentication by sending a simple POST request to the /upnp/control/basicevent1 endpoint.

Which software is affected by CVE-2019-12780?

The Belkin Crock-pot Smart Slow Cooker with Wemo Firmware is affected by CVE-2019-12780.

Is the Belkin Crock-pot Smart Slow Cooker with Wemo vulnerable to CVE-2019-12780?

No, the Belkin Crock-pot Smart Slow Cooker with Wemo is not vulnerable to CVE-2019-12780.

How can I fix CVE-2019-12780?

To fix CVE-2019-12780, it is recommended to update the firmware of the Belkin Wemo Enabled Crock-Pot to a version that addresses the vulnerability.

Vulnerability/
CVE-2019-12780

critical

9.8

CWE

78 77

10/6/2019

4/8/2024

CVE-2019-12780: OS Command Injection

First published: Mon Jun 10 2019(Updated: )

The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action. A simple POST request to /upnp/control/basicevent1 can allow an attacker to execute commands without authentication.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Belkin Crock-pot Smart Slow Cooker With Wemo Firmware
Belkin Crock-pot Smart Slow Cooker With Wemo

Never miss a vulnerability like this again

Reference Links

https://www.exploit-db.com/exploits/46436

Frequently Asked Questions

What is CVE-2019-12780?
CVE-2019-12780 is a vulnerability found in the Belkin Wemo Enabled Crock-Pot that allows command injection through the Wemo UPnP API.
How severe is CVE-2019-12780?
CVE-2019-12780 has a severity rating of 9.8, which is considered critical.
How does CVE-2019-12780 work?
CVE-2019-12780 allows an attacker to execute commands without authentication by sending a simple POST request to the /upnp/control/basicevent1 endpoint.
Which software is affected by CVE-2019-12780?
The Belkin Crock-pot Smart Slow Cooker with Wemo Firmware is affected by CVE-2019-12780.
Is the Belkin Crock-pot Smart Slow Cooker with Wemo vulnerable to CVE-2019-12780?
No, the Belkin Crock-pot Smart Slow Cooker with Wemo is not vulnerable to CVE-2019-12780.
How can I fix CVE-2019-12780?
To fix CVE-2019-12780, it is recommended to update the firmware of the Belkin Wemo Enabled Crock-Pot to a version that addresses the vulnerability.

collector/nvd-index
agent/weakness
agent/type
agent/references
agent/severity
agent/author
agent/event
agent/description
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
agent/tags
collector/mitre-cve
source/MITRE
vendor/belkin
canonical/belkin crock-pot smart slow cooker with wemo firmware
canonical/belkin crock-pot smart slow cooker with wemo

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.