Wemo: Difference between revisions - Consumer Rights Wiki

Line 25:

On May 16, 2023, multiple websites reported a Sternum study regarding a buffer overflow vulnerability in the Wemo Mini Smart Plug V2.<ref>https://sternumiot.com/iot-blog/mini-smart-plug-v2-vulnerability-buffer-overflow/</ref> The study mentions the device could be exploited through a program called pyWemo<ref>https://thehackernews.com/2023/05/serious-unpatched-vulnerability.html</ref> and potentially through cloud controls.<ref>https://www.theverge.com/2023/5/16/23725290/wemo-smart-plug-v2-smart-home-security-vulnerability</ref> In their official response, Wemo stated "we believe that bad actors cannot exploit this vulnerability unless they have access to the user’s local network"<ref>https://x.com/WEMOcares/status/1658963426230562819</ref> and "We discontinued the Wemo Mini Smart Plug v2 (F7C063) in 2020"<ref>https://x.com/WEMOcares/status/1658963635882938374</ref>, despite not making this information publicly available prior. During this report, the Wemo app hadn't been updated in 2 years, with the most recent update being on February 23, 2021, as previously mentioned.<ref name="AAS" />

===Connection issues===

Since 2018, there have been reports of Wemo devices losing connection to networks frequently.<ref>https://www.reddit.com/r/WeMo/comments/8sv90i/the_most_common_problems_and_issues_with_wemo/</ref> This has been the case for dimmers<ref>https://www.reddit.com/r/WeMo/comments/zwb7wr/comment/j1xqs3h/</ref>, plugs<ref>https://www.reddit.com/r/WeMo/comments/17ur9b2/comment/k97i0dp/</ref>, and switches.<ref>https://www.reddit.com/r/WeMo/comments/18iidjr/comment/m6utdkq/</ref> Device rules created through the Wemo app have also been described as unreliable.<ref>https://www.reddit.com/r/WeMo/comments/18iidjr/comment/kdr6n38/</ref>

Some users have mediated these issues by self-hosting a local server for Wemo devices, such as AutomationManager.<ref>https://www.reddit.com/r/WeMo/comments/18iidjr/comment/kf6plao/</ref>

===DNS activity===

@@ Line 25: / Line 25: @@
 On May 16, 2023, multiple websites reported a Sternum study regarding a buffer overflow vulnerability in the Wemo Mini Smart Plug V2.<ref>https://sternumiot.com/iot-blog/mini-smart-plug-v2-vulnerability-buffer-overflow/</ref> The study mentions the device could be exploited through a program called pyWemo<ref>https://thehackernews.com/2023/05/serious-unpatched-vulnerability.html</ref> and potentially through cloud controls.<ref>https://www.theverge.com/2023/5/16/23725290/wemo-smart-plug-v2-smart-home-security-vulnerability</ref> In their official response, Wemo stated "we believe that bad actors cannot exploit this vulnerability unless they have access to the user’s local network"<ref>https://x.com/WEMOcares/status/1658963426230562819</ref> and "We discontinued the Wemo Mini Smart Plug v2 (F7C063) in 2020"<ref>https://x.com/WEMOcares/status/1658963635882938374</ref>, despite not making this information publicly available prior. During this report, the Wemo app hadn't been updated in 2 years, with the most recent update being on February 23, 2021, as previously mentioned.<ref name="AAS" />
+===Connection issues===
+Since 2018, there have been reports of Wemo devices losing connection to networks frequently.<ref>https://www.reddit.com/r/WeMo/comments/8sv90i/the_most_common_problems_and_issues_with_wemo/</ref> This has been the case for dimmers<ref>https://www.reddit.com/r/WeMo/comments/zwb7wr/comment/j1xqs3h/</ref>, plugs<ref>https://www.reddit.com/r/WeMo/comments/17ur9b2/comment/k97i0dp/</ref>, and switches.<ref>https://www.reddit.com/r/WeMo/comments/18iidjr/comment/m6utdkq/</ref> Device rules created through the Wemo app have also been described as unreliable.<ref>https://www.reddit.com/r/WeMo/comments/18iidjr/comment/kdr6n38/</ref>
+Some users have mediated these issues by self-hosting a local server for Wemo devices, such as AutomationManager.<ref>https://www.reddit.com/r/WeMo/comments/18iidjr/comment/kf6plao/</ref>
 ===DNS activity===