| Belkin Wemo Switch (F7C027) | ||
|---|---|---|
|
Security Grade
Calculator v
|
Belkin Wemo Switch
Brand: Belkin Wemo (Parent: Belkin International, Inc.) Category: Smart plug • Model / Gen: 1st F7C027 Release Date: 2012-08-01 • Status: End of life Classification Date: • Official Website | |
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | 🔗 Proof | Physical disassembly is possible, mass tampering incidents are rare |
| Known vulnerabilities | Very common | 🔗 Proof | Multiple vulnerabilities including unauthenticated local API access |
| Prior attacks | Rare | 🔗 Proof | Local attack PoCs exist, large-scale internet attacks are uncommon |
| Updatability | Rare | 🔗 Proof | End of life, Belkin no longer releases security firmware updates |
| Category Score | Score: 3 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | [`https://www.belkin.com/wemo` 🔗 Proof] | Works within Wemo ecosystem, limited third-party integration |
| Communications | Encrypted with obselete encryption | 🔗 Proof | Local API communication uses outdated TLS implementations |
| Storage | No encryption | 🔗 Proof | Local configuration data and credentials are stored without encryption |
| Category Score | Score: 3 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Basic | 🔗 Proof | Basic device pairing control, no multi-user account management |
| Authentication | Basic | 🔗 Proof | Weak local authentication, no 2FA support |
| Brute-force protection | Absent | 🔗 Proof | No built-in rate limiting for login or API requests |
| Event logging | Partial logging | 🔗 Proof | Only simple on/off state history, no detailed access audit logs |
| Passwords | Default/Common/Easy to guess | 🔗 Proof | Early firmware relies on weak default authentication mechanisms |
| Category Score | Score: 3 / 3 | ||
| Property | Details |
|---|---|
| Operating System & App | Belkin proprietary RTOS (Companion App: Wemo) |
| Hardware (CPU / GPU) | CPU: Not publicly disclosed • GPU: Not publicly disclosed |
| Memory & Storage | Memory: Not publicly disclosed • Storage: Not publicly disclosed |
| Power, Battery & Charging | Battery: None • Power: AC 120 V mains power • Charging: Not applicable |
| Display & Camera | Display: None • Camera: None |
| Sound & Connectivity | Sound: None • Connectivity: Wi‑Fi 802.11 b/g/n, 2.4 GHz |
| Physical (Dimensions & Mass) | Dimensions: 108 × 74 × 40 mm • Mass: 120 g |
This is an EOL Wemo smart plug. It has insecure local API and obsolete encryption. It lacks strong authentication, brute force protection and encrypted local credential storage.
