What’s Vulnerable › Vulnerabilities

CVE-2018-6692: Wemo Insight Smart Plug - Remote Code Execution vulnerability

• Severity: critical (CVSS 10.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-08-21 · updated 2026-06-17
• Weakness: CWE-787

Description

Stack-based Buffer Overflow vulnerability in libUPnPHndlr.so in Belkin Wemo Insight Smart Plug allows remote attackers to bypass local security protection via a crafted HTTP post packet.

Affected products

• Belkin Wemo Insight Smart Plug: all versions

References

• https://securingtomorrow.mcafee.com/mcafee-labs/insight-into-home-automation-reveals-vulnerability-in-simple-iot-product
• https://securingtomorrow.mcafee.com/mcafee-labs/insight-into-home-automation-reveals-vulnerability-in-simple-iot-product

Get alerted when CVE-2018-6692 or the next vulnerability affects your stack