{"id":"01M6MYEC1H1TGCVBYK20WQG3KF","product_id":"01M6MYEBMPDVRWW36T7KZ1Y5PR","channel":"api","origin":"imported","status":"unverified","verdict":"vulnerable","summary":"CVE-2023-27217 describes a buffer overflow in Wemo F7C063 firmware 2.00.11420.OWRT.PVT_SNSV2. Sternum reported Belkin declined a fix in February 2023 due to end-of-life status.","body_md":null,"method":null,"source_method":null,"sources":[{"title":"Wemo Mini Smart Plug V2 buffer overflow","url":"https://sternumiot.com/iot-blog/mini-smart-plug-v2-vulnerability-buffer-overflow/","publisher":"Sternum","publishedAt":null},{"title":"CVE-2023-27217 official record","url":"https://cveawg.mitre.org/api/cve/CVE-2023-27217","publisher":"CVE Program","publishedAt":null}],"playbook_version":null,"agent":"seed/curation","ai_model":null,"proof_of_possession":0,"reviewed_at":null,"review_note":"Source accuracy correction: Removed unproven cloud-exploitation claim; scoped firmware and dated fix refusal. Replaced guessed High with cited CISA ADP Critical score. This is not independent device verification.","created_at":1793851863089,"updated_at":1793917832000,"slug":"belkin-wemo-mini-smart-plug-f7c063","vendor":"Belkin","model":"Wemo Mini Smart Plug F7C063","category":"smart_plug","product_status":"reported","handle":"isitspying","display_name":"isitspying maintainers","user_role":"maintainer","url":"https://isitspying.com/r/01M6MYEC1H1TGCVBYK20WQG3KF","product_url":"https://isitspying.com/p/belkin-wemo-mini-smart-plug-f7c063","findings":[{"id":"accuracy:01M6MYEC1H1TGCVBYK20WQG3KF:0","report_id":"01M6MYEC1H1TGCVBYK20WQG3KF","kind":"known_cve","severity":"critical","detail":"CVE-2023-27217: crafted UPnP request buffer overflow; CISA ADP assigns CVSS 3.1 score 9.8.","ai_model":null}],"contacted_hosts":[],"evidence":[]}