Belkin Wemo Mini Smart Plug
From Wiki-IoT
Revision as of 12:43, 25 October 2026 by QF20232859 (talk | contribs) (Created page with "{{Classification |name=Belkin Wemo Mini Smart Plug |brand=Belkin |parent_company=Belkin International (Foxconn) |website=https://www.belkin.com/wemo/ |release_date=2016-01-01...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
| Belkin Wemo Mini Smart Plug | ||
|---|---|---|
|
Security Grade
Calculator v
|
Belkin Wemo Mini Smart Plug
Brand: Belkin (Parent: Belkin International (Foxconn)) Category: Smart Plug • Model / Gen: 1 WSP080 Release Date: 2016-01-01 • Status: In sale Classification Date: • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | None | 🔗 Proof | No documented hardware tampering; sealed consumer plug |
| Known vulnerabilities | Very common | 🔗 Proof | CVE-2018-6692 UPnP buffer overflow RCE; CVE-2019-17532 DoS; CVE-2023-33768 bad firmware signature check (WSP080) |
| Prior attacks | None | 🔗 Proof | Not associated with major botnets like Mirai |
| Updatability | Rare | 🔗 Proof | Firmware updates exist but are infrequent and mostly manual |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | 🔗 Proof | Local UPnP control lacks strong authentication; research showed unauthenticated control commands |
| Communications | Encrypted with obselete encryption | 🔗 Proof | Local UPnP/SOAP control traffic is plaintext; Wi-Fi passphrase historically crackable (WeMo ecosystem research) |
| Storage | Encrypted with up-to-date encryption | 🔗 Proof | Minimal local storage; no sensitive user data retained on device |
| Category Score | Score: 2 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Basic | 🔗 Proof | Wemo account exists for remote control but has limited user management features |
| Authentication | Basic | 🔗 Proof | No device login; UPnP interface effectively unauthenticated |
| Brute-force protection | Basic | 🔗 Proof | No strong rate-limiting on local control interface |
| Event logging | Partial logging | 🔗 Proof | App shows usage history but no full security audit log |
| Passwords | Require change after setup | 🔗 Proof | No default device password; setup uses temporary access point |
| Category Score | Score: 2 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | Proprietary firmware (Companion App: Wemo App) |
| Hardware (CPU / GPU) | CPU: • GPU: |
| Memory & Storage | Memory: • Storage: |
| Power, Battery & Charging | Battery: None • Power: AC mains (120/240V) • Charging: |
| Display & Camera | Display: None (LED only) • Camera: none |
| Sound & Connectivity | Sound: none • Connectivity: Wi-Fi 802.11n (2.4 GHz), Apple HomeKit (via software update) |
| Physical (Dimensions & Mass) | Dimensions: 34 x 52 x 46 mm • Mass: |
