Skip to main content

Thousands of Belkin WeMo devices may be vulnerable to hackers: UPDATED

thousands belkin wemo devices may vulnerable hackers

UPDATE: Belkin has now released a fix for the security issues mentioned below. To remedy the issue, Belkin urges WeMo users to download the latest app from the App Store (version 1.4.1) or Google Play Store (version 1.1.2) and then upgrade the firmware version through the app. Find more information here

According to a recently-released study from security research firm IOActive, nearly half a million Belkin WeMo devices may be vulnerable to attackers.

Related Videos

In a number of different experiments, the WeMo line – which includes things like remotely-controlled switches, plugs, and motion sensors for home automation – was shown to have a variety of different security flaws that give hackers the ability to:

  • Remotely control WeMo devices over the Internet
  • Perform malicious firmware updates
  • Remotely monitor devices
  • Access an internal home network

Obviously, this is bad news for Belkin, but it’s even worse news for anyone who currently has a WeMo device in their house. If these vulnerabilities are legitimate, it means that once attackers have compromised a device, they’re free to remotely turn WeMo-connected appliances on or off at will. Depending on the gear users have connected to their WeMos, this could lead to something as harmless as some wasted electricity, or as dangerous as a house fire. On top of that, WeMo motion sensors could be used to remotely monitor a house. This could make a home an easy target for tech-savvy burglars who can use a compromised WeMo to determine when people are in that house, and when they aren’t.

Additionally, once an attacker has established a connection to a WeMo device within a victim’s network, the compromised device can be used as a foothold to attack other devices on your home network – including things like laptops, mobile phones, network-attached storage, or home automation devices. 

Mike Davis, IOActive’s principal research scientist, had this to say about the findings: 

“As we connect our homes to the Internet, it is increasingly important for Internet-of-Things device vendors to ensure that reasonable security methodologies are adopted early in product development cycles. This mitigates their customer’s exposure and reduces risk.”

We couldn’t agree more.

IOActive has reached out to Belkin for comments on the issue, but has yet to receive a response. For the time being, we recommend that you unplug any WeMo devices you may own and check back for updates.

We’ll keep you posted should any security patches be released.

[via Help Net Security]

Editors' Recommendations

How to install the Blink Pan-Tilt Mount
The Blink Mini installed in the Pan-Tilt Mount.

The Blink Mini is a solid indoor camera on its own, but when coupled with the Pan-Tilt Mount, it’s one of the best. This unique add-on product gives the Blink Mini everything it needs to rotate sideways or tilt vertically – providing you with a 360-degree view of your home. Installing your Blink Mini with the Pan-Tilt Mount is a rather straightforward, plug-and-play process, but there are a few steps that might give you some trouble.

Read more
Bluetti’s AC300 and B300 Combo Provides True Power Versatility and Reliability
Bluetti AC300 portable power station supplying power to desktop during outage.

This content was produced in partnership with Bluetti.
When it comes to preparing for power-related events, like outages, situations where you might need portable power options, and general usage, you really need some flexible and versatile solutions at your disposal. The more manageable the gear, the more opportunities you have to adapt to current events. For example, let's say your power goes out for a few days to a week. Having a portable power solution will certainly help, but also one that can be recharged via solar energy, reliably, with just a panel or two, will significantly improve your quality of life during that period. Even if the power doesn't come back on in time, you can recharge the station to keep fueling your modern living needs. It doesn't just stop there. Yes, it's great to have backup options in a time of need, but it's also great to just have a handy solution for whatever arises. Maybe you need to power your tools to do some work in the backyard or a workshop, but don't want to run an extension cord? Boom, the portable power solution will help. What if you have a music gig coming up in a remote park or location but need to power your instruments, microphone, and lighting? Cue the portable power solution. There are a lot of different scenarios where having a power device can change the game.

That's precisely what Bluetti is offering with its AC300 and B300 expansion batteries, which offer 3,072 watt-hours of power per battery. You can recharge them via a traditional wall socket, car outlet, or lead-acid battery, but also via solar with a 2,400-watt maximum loading scale thanks to integrated smart MPPT or Maximum Power Point Tracking technology. They're portable, lightweight, and modular, as you can expand the system with more batteries at any time to increase capacity. Plus, you can use them to power nearly everything, from electronics and small appliances to lighting and beyond. To learn a little more about why they're so versatile together and as a system, keep reading.
Buy Now
 
Power When and Where You Need It Most

Read more
Blink Mini Indoor Camera vs. Arlo Essential Indoor Cam
Arlo Essential Indoor Security Camera privacy shutter

The Blink Mini Indoor Camera and the Arlo Essential Indoor Cam are two of the best indoor cameras of 2023. Both provide you with an easy way to keep an eye on your home while you're away -- but with two remarkably different price tags (the Arlo clocks in at $100, while the Blink Mini is just $35), you might be wondering if the Arlo Essential Indoor Cam is worth the added investment.

Before you rush off and buy either product, here’s a closer look at the Blink Mini and Arlo Essential Indoor Cam to determine which is best for your needs and budget.
Video quality

Read more