{"id":"01M6MYEBMPDVRWW36T7KZ1Y5PR","slug":"belkin-wemo-mini-smart-plug-f7c063","vendor":"Belkin","oem":null,"model":"Wemo Mini Smart Plug F7C063","hw_revision":null,"category":"smart_plug","country_of_origin":"CN","description":"Second-generation Wemo Mini. Sternum (2023) found a buffer overflow via the device name field (CVE-2023-27217); Belkin said the model is end-of-life and will not be patched.","status":"confirmed","status_reason":"CVE-2023-27217; vendor declined to patch (EOL)","status_at":1793853874976,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851862678,"updated_at":1793853874976,"url":"https://isitspying.com/p/belkin-wemo-mini-smart-plug-f7c063","badge":"https://isitspying.com/badge/belkin-wemo-mini-smart-plug-f7c063.svg","identifiers":[{"kind":"cve","value":"CVE-2023-27217","product_id":"01M6MYEBMPDVRWW36T7KZ1Y5PR","confidence":1,"source":"seed","created_at":1793851862796},{"kind":"model_number","value":"F7C063","product_id":"01M6MYEBMPDVRWW36T7KZ1Y5PR","confidence":1,"source":"seed","created_at":1793851862842}],"findings":[{"kind":"known_cve","severity":"high","n":1,"verified_n":1}],"contacted_hosts":[],"reports":[{"id":"01M6MYEC1H1TGCVBYK20WQG3KF","url":"https://isitspying.com/r/01M6MYEC1H1TGCVBYK20WQG3KF","status":"verified","verdict":"vulnerable","summary":"Buffer overflow via FriendlyName (CVE-2023-27217) allows code execution from the LAN or the cloud; unpatched, EOL","method":"firmware_dump","channel":"api","handle":"isitspying","created_at":1793851863089}],"responses":[],"sources":[{"id":"01M6MYEBZ05D7YWJ26J4SY04FT","product_id":"01M6MYEBMPDVRWW36T7KZ1Y5PR","report_id":null,"title":"Sternum: Belkin Wemo Mini Smart Plug vulnerability","url":"https://sternumiot.com/iot-blog/mini-smart-plug-v2-vulnerability-buffer-overflow/","publisher":"Sternum","published_at":"2023-05-16","created_at":1793851863008},{"id":"01M6MYEBWCH8EV1S98JWSCVG57","product_id":"01M6MYEBMPDVRWW36T7KZ1Y5PR","report_id":null,"title":"CVE-2023-27217","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27217","publisher":"NVD","published_at":"2023-05-16","created_at":1793851862924}]}