CVE-2023-33768

Description

Incorrect signature verification of the firmware during the Device Firmware Update process of Belkin Wemo Smart Plug WSP080 v1.2 allows attackers to cause a Denial of Service (DoS) via a crafted firmware file.

NVD

Severity: MEDIUM
CVE ID: CVE-2023-33768
CVSS Score: 6.5
CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Refrence: NVDMITRE

Proof Of Concept

purseclab

DoS against Belkin smart plugs via crafted firmware injection

Refrence: GitHub

Fr0stM0urne

DoS against Belkin smart plugs via crafted firmware injection

Refrence: GitHub