[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Full-disclosure] Belkin WeMo Remote Shell and State Change 0day Exploit
- To: full-disclosure@xxxxxxxxxxxxxxxxx
- Subject: [Full-disclosure] Belkin WeMo Remote Shell and State Change 0day Exploit
- From: Daniel Cardenas <dviciousb@xxxxxxxxx>
- Date: Tue, 29 Jan 2013 22:26:50 -0600
Discovered several UPnP vulnerabilites which allowed me to gain full shell
access and modify the state of the device being controlled. Im in the process
of disclosing to Belkin. PoC soon to come. Link to video below.
http://youtu.be/BcW2q0aHOFo
Belkin WeMo with latest firmware. Able to gain full root access and send
commands including changing the state of connected device via flaw in UPnP
implementation. Chose small desk lamp and simple on/off sequence due to safety
concerns. Real world this could be a fan or space heater and rapidly turn
on/off without limitation.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/