Wemo: Difference between revisions
m Clean-up; note for ref 22. |
Re-archived 14 citation(s) from archive.today to web.archive.org using CRWCitationBot |
||
| Line 29: | Line 29: | ||
On 5 November 2013, Wemo updated its API to prevent future XML injection attacks.<ref>{{Cite web |author= |title=Wemo® and Security |url=https://www.belkin.com/support-article/?articleNum=80322 |website=[[Belkin]] |date= |access-date=19 Feb 2026 |url-status=live |archive-url=https://web.archive.org/web/20230926192207/https://www.belkin.com/support-article/?articleNum=80322 |archive-date=26 Sep 2023}}</ref> | On 5 November 2013, Wemo updated its API to prevent future XML injection attacks.<ref>{{Cite web |author= |title=Wemo® and Security |url=https://www.belkin.com/support-article/?articleNum=80322 |website=[[Belkin]] |date= |access-date=19 Feb 2026 |url-status=live |archive-url=https://web.archive.org/web/20230926192207/https://www.belkin.com/support-article/?articleNum=80322 |archive-date=26 Sep 2023}}</ref> | ||
On 16 May 2023, multiple websites reported a Sternum study regarding a buffer overflow vulnerability in the Wemo Mini Smart Plug V2.<ref>{{Cite web |last1=Serper |first1=Amit |last2=Yakar |first2=Reuven |title=‘FriendlyName’ Buffer Overflow Vulnerability in Wemo Smart Plug V2 |url=https://sternumiot.com/iot-blog/mini-smart-plug-v2-vulnerability-buffer-overflow/ |website=Sternum |date=16 May 2023 |access-date=19 Feb 2026 |url-status=live |archive-url=https://web.archive.org/web/20230516160431/https://sternumiot.com/iot-blog/mini-smart-plug-v2-vulnerability-buffer-overflow/ |archive-date=16 May 2023}}</ref> The study mentions the device could be exploited through a program called pyWemo<ref>{{Cite web |last=Lakshmanan |first=Ravie |title=Serious Unpatched Vulnerability Uncovered in Popular Belkin Wemo Smart Plugs |url=https://thehackernews.com/2023/05/serious-unpatched-vulnerability.html |website=The Hacker News |date=17 May 2023 |access-date=19 Feb 2026 |url-status=live |archive-url=https://web.archive.org/web/20230517155641/https://thehackernews.com/2023/05/serious-unpatched-vulnerability.html |archive-date=17 May 2023}}</ref> and potentially through cloud controls.<ref>{{Cite web |last=Davis |first=Wes |title=PSA: time to recycle your old Wemo smart plugs (if you haven’t already) |url=https://www.theverge.com/2023/5/16/23725290/wemo-smart-plug-v2-smart-home-security-vulnerability |website=The Verge |date=16 May 2023 |access-date=29 Mar 2025 |url-status=live |archive-url=https://web.archive.org/web/20230517021155/https://www.theverge.com/2023/5/16/23725290/wemo-smart-plug-v2-smart-home-security-vulnerability |archive-date=17 May 2023}}</ref> In their official response, Wemo stated "we believe that bad actors cannot exploit this vulnerability unless they have access to the user's local network",<ref>{{Cite web |author=WEMOcares |title=WEMOcares on X |url=https://x.com/WEMOcares/status/1658963426230562819 |website=[[X]] |date=17 May 2023 |access-date=19 Mar 2025 |url-status=live |archive-url=https:// | On 16 May 2023, multiple websites reported a Sternum study regarding a buffer overflow vulnerability in the Wemo Mini Smart Plug V2.<ref>{{Cite web |last1=Serper |first1=Amit |last2=Yakar |first2=Reuven |title=‘FriendlyName’ Buffer Overflow Vulnerability in Wemo Smart Plug V2 |url=https://sternumiot.com/iot-blog/mini-smart-plug-v2-vulnerability-buffer-overflow/ |website=Sternum |date=16 May 2023 |access-date=19 Feb 2026 |url-status=live |archive-url=https://web.archive.org/web/20230516160431/https://sternumiot.com/iot-blog/mini-smart-plug-v2-vulnerability-buffer-overflow/ |archive-date=16 May 2023}}</ref> The study mentions the device could be exploited through a program called pyWemo<ref>{{Cite web |last=Lakshmanan |first=Ravie |title=Serious Unpatched Vulnerability Uncovered in Popular Belkin Wemo Smart Plugs |url=https://thehackernews.com/2023/05/serious-unpatched-vulnerability.html |website=The Hacker News |date=17 May 2023 |access-date=19 Feb 2026 |url-status=live |archive-url=https://web.archive.org/web/20230517155641/https://thehackernews.com/2023/05/serious-unpatched-vulnerability.html |archive-date=17 May 2023}}</ref> and potentially through cloud controls.<ref>{{Cite web |last=Davis |first=Wes |title=PSA: time to recycle your old Wemo smart plugs (if you haven’t already) |url=https://www.theverge.com/2023/5/16/23725290/wemo-smart-plug-v2-smart-home-security-vulnerability |website=The Verge |date=16 May 2023 |access-date=29 Mar 2025 |url-status=live |archive-url=https://web.archive.org/web/20230517021155/https://www.theverge.com/2023/5/16/23725290/wemo-smart-plug-v2-smart-home-security-vulnerability |archive-date=17 May 2023}}</ref> In their official response, Wemo stated "we believe that bad actors cannot exploit this vulnerability unless they have access to the user's local network",<ref>{{Cite web |author=WEMOcares |title=WEMOcares on X |url=https://x.com/WEMOcares/status/1658963426230562819 |website=[[X]] |date=17 May 2023 |access-date=19 Mar 2025 |url-status=live |archive-url=http://web.archive.org/web/20250708194705/https://x.com/WEMOcares/status/1658963426230562819 |archive-date=8 Jul 2025}}</ref> and "We discontinued the Wemo Mini Smart Plug v2 (F7C063) in 2020"<ref>{{Cite web |author=WEMOcares |title=WEMOcares on X |url=https://x.com/WEMOcares/status/1658963635882938374 |website=[[X]] |date=17 May 2023 |access-date=19 Feb 2026 |url-status=live |archive-url=http://web.archive.org/web/20250708194656/https://x.com/WEMOcares/status/1658963635882938374 |archive-date=8 Jul 2025}}</ref> despite not making this information publicly available prior. During this report, the Wemo app hadn't been updated in two years, with the most recent update being on February 23, 2021, as previously mentioned.<ref name="AAS" /> | ||
===Connection issues (''2018—2026'')=== | ===Connection issues (''2018—2026'')=== | ||
Since 2018, there have been reports of Wemo devices losing connection to networks frequently.<ref>{{Cite web |author=luisfpinto |title=The most common problems and issues with Wemo devices | Since 2018, there have been reports of Wemo devices losing connection to networks frequently.<ref>{{Cite web |author=luisfpinto |title=The most common problems and issues with Wemo devices | ||
|url=https://old.reddit.com/r/WeMo/comments/8sv90i/the_most_common_problems_and_issues_with_wemo/ |website=[[Reddit]] |date=21 Jun 2018 |access-date=19 Feb 2026 |url-status=live |archive-url= | |url=https://old.reddit.com/r/WeMo/comments/8sv90i/the_most_common_problems_and_issues_with_wemo/ |website=[[Reddit]] |date=21 Jun 2018 |access-date=19 Feb 2026 |url-status=live |archive-url=http://web.archive.org/web/20230610122822/https://old.reddit.com/r/WeMo/comments/8sv90i/the_most_common_problems_and_issues_with_wemo/ |archive-date=10 Jun 2023}}</ref> This has been the case for dimmers,<ref>{{Cite web |author=boggsrays |title=The End of WeMo? |url=https://old.reddit.com/r/WeMo/comments/zwb7wr/comment/j1xqs3h/ |website=[[Reddit]] |date=28 Dec 2022 |access-date=29 Mar 2025 |url-status=live |archive-url=https://web.archive.org/web/20260222233029/https://old.reddit.com/r/WeMo/comments/zwb7wr/the_end_of_wemo/j1xqs3h/ |archive-date=22 Feb 2026}}</ref> plugs,<ref>{{Cite web |author=Specul8 |title=WeMo in 2023. Is it dead? Probably. |url=https://old.reddit.com/r/WeMo/comments/17ur9b2/comment/k97i0dp/ |website=[[Reddit]] |date=14 Nov 2023 |access-date=19 Feb 2025 |url-status=live |archive-url=https://web.archive.org/web/20260222233050/https://old.reddit.com/r/WeMo/comments/17ur9b2/wemo_in_2023_is_it_dead_probably/k97i0dp/ |archive-date=22 Feb 2026}}</ref> and switches.<ref>{{Cite web |author=rickatk |title=Thoughts on WEMO going into 2024? |url=https://old.reddit.com/r/WeMo/comments/18iidjr/thoughts_on_wemo_going_into_2024/m6utdkq/ |website=[[Reddit]] |date=13 Jan 2023 |access-date=19 Feb 2026 |url-status=live |archive-url=https://web.archive.org/web/20260222233112/https://old.reddit.com/r/WeMo/comments/18iidjr/thoughts_on_wemo_going_into_2024/m6utdkq/ |archive-date=22 Feb 2026}}</ref> Device rules created through the Wemo app have also been described as unreliable.<ref>{{Cite web |author=-JEFF007- |title=Thoughts on WEMO going into 2024? |url=https://old.reddit.com/r/WeMo/comments/18iidjr/thoughts_on_wemo_going_into_2024/kdr6n38/ |website=[[Reddit]] |date=17 Dec 2023 |access-date=19 Feb 2026 |url-status=live |archive-url=https://web.archive.org/web/20260222233136/https://old.reddit.com/r/WeMo/comments/18iidjr/thoughts_on_wemo_going_into_2024/kdr6n38/ |archive-date=22 Feb 2026}}</ref> In some cases, the Wemo cloud becomes offline, with users being led to 404 pages.<ref>{{Cite web |author= | ||
|title=Belkin Wemo is the worst! The App is full of bugs, the cloud is "drifted away" every other day, and even their link to the "more info" is dead! |url=https://old.reddit.com/r/WeMo/comments/zkd9xc/belkin_wemo_is_the_worst_the_app_is_full_of_bugs/ |website=[[Reddit]] |date=12 Dec 2022 |access-date=19 Feb 2026 |url-status=live |archive-url=https:// | |title=Belkin Wemo is the worst! The App is full of bugs, the cloud is "drifted away" every other day, and even their link to the "more info" is dead! |url=https://old.reddit.com/r/WeMo/comments/zkd9xc/belkin_wemo_is_the_worst_the_app_is_full_of_bugs/ |website=[[Reddit]] |date=12 Dec 2022 |access-date=19 Feb 2026 |url-status=live |archive-url=http://web.archive.org/web/20221213062324/https://old.reddit.com/r/WeMo/comments/zkd9xc/belkin_wemo_is_the_worst_the_app_is_full_of_bugs/ |archive-date=13 Dec 2022}}</ref> Reports of [[Amazon Alexa]] and [[Google]] home integrations not working for periods of time are also common.<ref>{{Cite web |author=JonSnowWho |title=Google is trying... |url=https://old.reddit.com/r/WeMo/comments/1le3til/google_is_trying/ |website=[[Reddit]] |date=17 Jun 2025 |access-date=19 Feb 2026 |url-status=live |archive-url=https://web.archive.org/web/20260222233206/https://old.reddit.com/r/WeMo/comments/1le3til/google_is_trying/ |archive-date=22 Feb 2026}}</ref> Users have reported the devices only working with Apple Homekit<ref>{{Cite web |author=XYZZY_1002 |title=Wemo Plugs and some Switches/Dimmers suddenly no longer detected |url=https://old.reddit.com/r/WeMo/comments/1h0ec6v/wemo_plugs_and_some_switchesdimmers_suddenly_no/ |website=[[Reddit]] |date=26 Nov 2024 |access-date=19 Feb 2026 |url-status=live |archive-url=https://web.archive.org/web/20260222233228/https://old.reddit.com/r/WeMo/comments/1h0ec6v/wemo_plugs_and_some_switchesdimmers_suddenly_no/ |archive-date=22 Feb 2026}}</ref>, which can be inconvenient for users without Apple accounts or compatible devices. | ||
Some users have mediated these issues by self-hosting a local server for Wemo devices, such as AutomationManager and Home Assistant.<ref>{{Cite web |author= |title=Thoughts on WEMO going into 2024? |url=https://old.reddit.com/r/WeMo/comments/18iidjr/comment/kf6plao/ |website=[[Reddit]] |date= |access-date=29 Mar 2025 |url-status=dead |archive-url= |archive-date= |quote=WARNING: UNPOPULAR OPINION I have a dozen Wemo devices (2nd-Gen single-pole switches and Mini plugs). I have used them for four years. I LOVE THEM. I control my Wemoes with a 3rd-party app, AutomationManager (AM). Software-wise, I am completely divested from Belkin. Simply put, with AM my Wemo network is 100% rock-steady. Thanks to AM, I do things with my Wemo devices that no other platform can do (including Kasa, Lutron, etc.). Without Wemo, I would've had to design and install my own embedded-control network, run romex through foundation walls, etc. No other smart-home architecture offers a local API as sophisticated as Wemo's, and AM makes excellent use of this API. Because I run my own local server through AM, I don't rely on Belkin's cloud service; remote control is administered through my Google Drive account, to which I have access and which I can manage on my own. Consequently, my Wemo network is much more secure than any platform that relies on a privately-held cloud service (many of which are based in China...). BTW, if your router's firewall is so weak that your Wemo Mini can be hacked remotely, then you have much bigger problems than someone hacking your Wemo Mini. 4) AM's developer (MikeP) maintains his app, and updates it as needed (which isn't often). 5) I don't want Belkin to update my device's firmware, because everything already runs as it should. I also don't want some future update breaking the local API! I will be sorry when my Wemo hardware finally dies, because I don't see any other company stepping up to offer a control architecture (local or cloud-based) that will allow me to do what I currently do with Wemo.}}<!-- Comment was removed by user and there are no existing back-ups of it. -Sojourna --></ref> | Some users have mediated these issues by self-hosting a local server for Wemo devices, such as AutomationManager and Home Assistant.<ref>{{Cite web |author= |title=Thoughts on WEMO going into 2024? |url=https://old.reddit.com/r/WeMo/comments/18iidjr/comment/kf6plao/ |website=[[Reddit]] |date= |access-date=29 Mar 2025 |url-status=dead |archive-url= |archive-date= |quote=WARNING: UNPOPULAR OPINION I have a dozen Wemo devices (2nd-Gen single-pole switches and Mini plugs). I have used them for four years. I LOVE THEM. I control my Wemoes with a 3rd-party app, AutomationManager (AM). Software-wise, I am completely divested from Belkin. Simply put, with AM my Wemo network is 100% rock-steady. Thanks to AM, I do things with my Wemo devices that no other platform can do (including Kasa, Lutron, etc.). Without Wemo, I would've had to design and install my own embedded-control network, run romex through foundation walls, etc. No other smart-home architecture offers a local API as sophisticated as Wemo's, and AM makes excellent use of this API. Because I run my own local server through AM, I don't rely on Belkin's cloud service; remote control is administered through my Google Drive account, to which I have access and which I can manage on my own. Consequently, my Wemo network is much more secure than any platform that relies on a privately-held cloud service (many of which are based in China...). BTW, if your router's firewall is so weak that your Wemo Mini can be hacked remotely, then you have much bigger problems than someone hacking your Wemo Mini. 4) AM's developer (MikeP) maintains his app, and updates it as needed (which isn't often). 5) I don't want Belkin to update my device's firmware, because everything already runs as it should. I also don't want some future update breaking the local API! I will be sorry when my Wemo hardware finally dies, because I don't see any other company stepping up to offer a control architecture (local or cloud-based) that will allow me to do what I currently do with Wemo.}}<!-- Comment was removed by user and there are no existing back-ups of it. -Sojourna --></ref> | ||
===DNS activity (''2024'')=== | ===DNS activity (''2024'')=== | ||
Some users of Wemo have noticed their switches connect to multiple unrelated domains, such as to CNN and Fastly.<ref>{{Cite web |author=sd_042 |title=Fun fact: Wemo switches act as a DNS server |url=https://old.reddit.com/r/WeMo/comments/1auslst/fun_fact_wemo_switches_act_as_a_dns_server/ |website=[[Reddit]] |date=19 Feb 2024 |access-date=29 Mar 2025 |url-status=live |archive-url= | Some users of Wemo have noticed their switches connect to multiple unrelated domains, such as to CNN and Fastly.<ref>{{Cite web |author=sd_042 |title=Fun fact: Wemo switches act as a DNS server |url=https://old.reddit.com/r/WeMo/comments/1auslst/fun_fact_wemo_switches_act_as_a_dns_server/ |website=[[Reddit]] |date=19 Feb 2024 |access-date=29 Mar 2025 |url-status=live |archive-url=http://web.archive.org/web/20240307040322/https://old.reddit.com/r/WeMo/comments/1auslst/fun_fact_wemo_switches_act_as_a_dns_server/ |archive-date=7 Mar 2024}}</ref> Other reports mention each Wemo device making 160,000+ DNS requests in a 24-hour timeframe.<ref>{{Cite web |author=D3-Doom |title=Fun fact: Wemo switches act as a DNS server |url=https://old.reddit.com/r/WeMo/comments/1auslst/fun_fact_wemo_switches_act_as_a_dns_server/ktxkqx8/ |website=[[Reddit]] |date=8 Mar 2024 |access-date=19 Feb 2026 |url-status=live |archive-url=https://web.archive.org/web/20260222233252/https://old.reddit.com/r/WeMo/comments/1auslst/fun_fact_wemo_switches_act_as_a_dns_server/ktxkqx8/ |archive-date=22 Feb 2026}}</ref> | ||
===Discontinuation of cloud service (''2026'')=== | ===Discontinuation of cloud service (''2026'')=== | ||
| Line 45: | Line 45: | ||
[[File:Wemo affected products after cloud shutdown.png|right|thumb|List of affected products from the discontinuation of cloud services]] | [[File:Wemo affected products after cloud shutdown.png|right|thumb|List of affected products from the discontinuation of cloud services]] | ||
On 10 July 2025, Wemo users were e-mailed regarding the future state of the Wemo cloud services, including voice assistant and app support.<ref name="WemoEmail">{{Cite web |author= |title=After careful consideration, we have made the difficult decision to end technical support for older Wemo products, effective January 31, 2026. |url=https://manage.kmail-lists.com/subscriptions/web-view?a=R7Hguj&c=01JZTNY2H9Y0ASQJB31R4SSGWX&k=9608f1679c229fc5b19e55abd9f9b99b&g=Y7Tbn5&m=RkSqQ9&r=01JZTS07RGZ7S0AWSAX0JP5FH3&e=01JZTNY2H9Y0ASQJB31R4SSGWX |website=Klaviyo |date=10 Jul 2025 |access-date=19 Feb 2026 |url-status=live |archive-url=https://web.archive.org/web/20250710212840/https://manage.kmail-lists.com/subscriptions/web-view?a=R7Hguj&c=01JZTNY2H9Y0ASQJB31R4SSGWX&k=9608f1679c229fc5b19e55abd9f9b99b&g=Y7Tbn5&m=RkSqQ9&r=01JZTS07RGZ7S0AWSAX0JP5FH3&e=01JZTNY2H9Y0ASQJB31R4SSGWX |archive-date=10 Jul 2025}}</ref> Devices that weren't designed for Apple HomeKit integration would cease to function after January 31, 2026.<ref>{{Cite web |author= |title=Wemo Support Ending – What You Need to Know |url=https://www.belkin.com/support-article/?articleNum=335419 |website=[[Belkin]] |date=10 Jul 2025 |access-date=19 Feb 2026 |url-status=live |archive-url=https:// | On 10 July 2025, Wemo users were e-mailed regarding the future state of the Wemo cloud services, including voice assistant and app support.<ref name="WemoEmail">{{Cite web |author= |title=After careful consideration, we have made the difficult decision to end technical support for older Wemo products, effective January 31, 2026. |url=https://manage.kmail-lists.com/subscriptions/web-view?a=R7Hguj&c=01JZTNY2H9Y0ASQJB31R4SSGWX&k=9608f1679c229fc5b19e55abd9f9b99b&g=Y7Tbn5&m=RkSqQ9&r=01JZTS07RGZ7S0AWSAX0JP5FH3&e=01JZTNY2H9Y0ASQJB31R4SSGWX |website=Klaviyo |date=10 Jul 2025 |access-date=19 Feb 2026 |url-status=live |archive-url=https://web.archive.org/web/20250710212840/https://manage.kmail-lists.com/subscriptions/web-view?a=R7Hguj&c=01JZTNY2H9Y0ASQJB31R4SSGWX&k=9608f1679c229fc5b19e55abd9f9b99b&g=Y7Tbn5&m=RkSqQ9&r=01JZTS07RGZ7S0AWSAX0JP5FH3&e=01JZTNY2H9Y0ASQJB31R4SSGWX |archive-date=10 Jul 2025}}</ref> Devices that weren't designed for Apple HomeKit integration would cease to function after January 31, 2026.<ref>{{Cite web |author= |title=Wemo Support Ending – What You Need to Know |url=https://www.belkin.com/support-article/?articleNum=335419 |website=[[Belkin]] |date=10 Jul 2025 |access-date=19 Feb 2026 |url-status=live |archive-url=http://web.archive.org/web/20260127181224/https://www.belkin.com/support-article/?articleNum=335419 |archive-date=27 Jan 2026}}</ref> This caused frustration for users who had non-Homekit Wemo devices because without software like Home Assistant, the devices cannot be used.<ref>{{Cite web |author=Connir |title=It’s officially ending. I just got this email. Glad I started switching to Zigbee last week. |url=https://old.reddit.com/r/WeMo/comments/1lwilvc/its_officially_ending_i_just_got_this_email_glad/ |website=[[Reddit]] |date=10 Jul 2025 |access-date=19 Feb 2026 |url-status=live |archive-url=https://web.archive.org/web/20260222233317/https://old.reddit.com/r/WeMo/comments/1lwilvc/its_officially_ending_i_just_got_this_email_glad/ |archive-date=22 Feb 2026}}</ref> | ||
}}</ref> | |||
==Products== | ==Products== | ||