CVE-2013-6950

CVE-2013-6950 describes a critical vulnerability in Belkin WeMo Home Automation firmware versions prior to 3949, where the firmware update distribution feed lacks SSL encryption. This allows unauthenticated attackers to conduct man-in-the-middle attacks, spoofing the distribution server to install arbitrary, malicious firmware. The vulnerability carries a CVSS score of 7.8, indicating high severity due to its network-based attack vector and low attack complexity, potentially leading to complete compromise of affected devices. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei, and it has received negligible community discussion or media coverage.