Belkin WeMo Mini (F7C063)
From Wiki-IoT
Revision as of 14:46, 23 October 2026 by Changlei (talk | contribs) (Created page with "{{Classification |name=Belkin WeMo Mini (F7C063) |brand=Belkin |parent_company=Belkin International |website=https://www.belkin.com/ |release_date=2015-01-06 |generation=2nd |...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
| Belkin WeMo Mini (F7C063) | ||
|---|---|---|
|
Security Grade
Calculator v
|
Belkin WeMo Mini (F7C063)
Brand: Belkin (Parent: Belkin International) Category: Smart Plug • Model / Gen: 2nd F7C063 Release Date: 2015-01-06 • Status: In sale Classification Date: • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | None | 🔗 Proof | In-wall plug; physical access requires plug removal |
| Known vulnerabilities | Very common | 🔗 Proof | CVE-2023-27217 (CVSS 9.8 RCE buffer overflow); CVE-2013-6952 hard-coded cryptographic key; CVE-2019-17094 |
| Prior attacks | Rare | 🔗 Proof | Multiple vulnerabilities documented by CERT/CC VU#656302; WeMo frequently cited in IoT botnet research |
| Updatability | None | 🔗 Proof | Belkin explicitly refused to patch CVE-2023-27217; device end-of-life |
| Category Score | Score: 3 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | No | 🔗 Proof | Local UPnP/HTTP API accepts unauthenticated commands |
| Communications | No encryption | 🔗 Proof | Hard-coded SSL private key across all devices (CVE-2013-6952); legacy HTTP |
| Storage | No encryption | 🔗 Proof | Hard-coded key and password stored in firmware flash |
| Category Score | Score: 3 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Absent | 🔗 Proof | Legacy local-only device; no cloud account model |
| Authentication | Absent | 🔗 Proof | Hard-coded cryptographic key and password in firmware |
| Brute-force protection | Absent | 🔗 Proof | No rate limiting on local HTTP |
| Event logging | Absent | [`https://www.belkin.com/` 🔗 Proof] | No event log exposed |
| Passwords | Default/Common/Easy to guess | 🔗 Proof | Known default creds (admin/blank, 1111, etc.) listed online |
| Category Score | Score: 3 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | Embedded RTOS (Companion App: WeMo) |
| Hardware (CPU / GPU) | CPU: • GPU: |
| Memory & Storage | Memory: • Storage: Internal flash |
| Power, Battery & Charging | Battery: No battery • Power: 120V AC, 1800W max • Charging: N/A |
| Display & Camera | Display: No display • Camera: No camera |
| Sound & Connectivity | Sound: No speaker • Connectivity: Wi-Fi 802.11n |
| Physical (Dimensions & Mass) | Dimensions: 2.5 x 1.5 x 1.5 inches • Mass: 0.15 lbs (68 g) |
