What’s Vulnerable › Vulnerabilities
CVE-2019-12780
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 71.3% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2019-06-10 · updated 2026-06-17
- Weakness: CWE-78
Description
The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action. A simple POST request to /upnp/control/basicevent1 can allow an attacker to execute commands without authentication.
Affected products
- Belkin Crock-Pot Smart Slow Cooker With Wemo Firmware: all versions
References
Get alerted when CVE-2019-12780 or the next vulnerability affects your stack