First published: Thu Jul 13 2023(Updated: )
Incorrect signature verification of the firmware during the Device Firmware Update process of Belkin Wemo Smart Plug WSP080 v1.2 allows attackers to cause a Denial of Service (DoS) via a crafted firmware file.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Belkin Wemo Smart Plug Wsp080 Firmware | =1.2 | |
Belkin Wemo Smart Plug WSP080 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-33768 is a vulnerability that allows attackers to cause a Denial of Service (DoS) by exploiting incorrect signature verification during the firmware update process of Belkin Wemo Smart Plug WSP080 v1.2.
The severity of CVE-2023-33768 is medium with a CVSS score of 6.5.
CVE-2023-33768 affects Belkin Wemo Smart Plug WSP080 v1.2 by allowing attackers to cause a Denial of Service (DoS) through a crafted firmware file.
To fix CVE-2023-33768, it is recommended to update to a version of Belkin Wemo Smart Plug WSP080 firmware that resolves the incorrect signature verification issue.
More information about CVE-2023-33768 can be found on the following references: [1] https://www.amazon.com/Control-Devices-Remotely-Assistant-HomeKit/dp/B08CJGZZZ1 [2] https://github.com/purseclab/CVE-2023-33768 [3] https://play.google.com/store/apps/details?id=com.belkin.wemoandroid&hl=en_US&gl=US