CVE-2023-27217

A stack-based buffer overflow in the ChangeFriendlyName() function of Belkin Smart Outlet V2 F7c063 firmware_2.00.11420.OWRT.PVT_SNSV2 allows attackers to…

Critical · published May 18, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
61.9
In the wild
Unconfirmed
What it is

🚨 A crafted UPNP request can trigger a stack-based buffer overflow in Belkin Smart Outlet V2 firmware, leading to a Denial of Service (DoS)! 🔥 Think of it like a waiter who misreads an order and serves an entire table the wrong dish, causing chaos in the kitchen — the outlet just can't handle the miscommunication and crashes instead! This vulnerability is absolutely devastating for your smart outlet. An attacker could send just the right request to overload the system, leading to complete service interruptions — your smart outlet would become a dumb doorstop. No command, no control!

Put simply

Think of it like a waiter who misreads an order and serves an entire table the wrong dish, causing chaos in the kitchen — the outlet just can't handle the miscommunication and crashes instead! The issue lies in the ChangeFriendlyName() function of the firmware, where a stack-based buffer overflow occurs when processing UPNP requests, allowing attackers to disrupt normal operations.

What to do

This vulnerability is absolutely devastating for your smart outlet. An attacker could send just the right request to overload the system, leading to complete service interruptions — your smart outlet would become a dumb doorstop. No command, no control! To protect your devices, update the firmware to version 2.00.11421.OWRT.PVT_SNSV2 or later immediately. Additionally, consider disabling UPNP if it's not essential for your setup to further reduce risk. You've got this! Secure your smart home by following these steps and keep your gadgets running smoothly! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00982 · 61.9th percentile
Published
2023-05-18T00:00Z
EPSS history
Timeline
  • 18 MAY 00:00Z
    A stack-based buffer overflow in the ChangeFriendlyName() function of Belkin Smart Outlet V2 F7c063 firmware_2.00.11420.OWRT.PVT_SNSV2 allows attackers to…
    cvelistv5