(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
| Belkin WeMo Switch
|
|
Security Grade
Calculator v
|
Belkin WeMo Switch
Release Date: 2012-01-01 • Status: Discontinued
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
—
|
Sealed plastic plug device.
|
| Known vulnerabilities
|
|
—
|
|
| Prior attacks
|
Very common
|
🔗 Proof
|
WeMo switches were famously hacked and exploited in security research demonstrations.
|
| Updatability
|
Rare
|
—
|
Legacy device with limited or no firmware updates.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Basic
|
🔗 Proof
|
Controlled via WeMo app; local network access.
|
| Communications
|
Encrypted with up-to-date encryption
|
—
|
Uses HTTP/HTTPS; older versions had weak encryption.
|
| Storage
|
Encrypted with up-to-date encryption
|
—
|
Minimal local storage.
|
| Category Score
|
Score: 1 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
—
|
WeMo app account required.
|
| Authentication
|
Basic
|
—
|
Weak default authentication in early models.
|
| Brute-force protection
|
Rare
|
—
|
Limited rate limiting.
|
| Event logging
|
Rare
|
—
|
Minimal event logging.
|
| Passwords
|
Require change after setup
|
—
|
Forces password setup during initial configuration.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
(Companion App: )
|
| Hardware (CPU / GPU)
|
CPU: • GPU:
|
| Memory & Storage
|
Memory: • Storage:
|
| Power, Battery & Charging
|
Battery: • Power: • Charging:
|
| Display & Camera
|
Display: • Camera:
|
| Sound & Connectivity
|
Sound: • Connectivity:
|
| Physical (Dimensions & Mass)
|
Dimensions: • Mass:
|
The Belkin WeMo Switch is one of the earliest smart plug devices. It is now discontinued but still in use in many homes. It has a history of serious security vulnerabilities including remote code execution and weak authentication. Due to lack of ongoing firmware support, it is a high-risk device that should be replaced. Poor security management is recommended (upgrade recommended).
