WeMo Crockpot

Evaluation Details

Device	Mobile Application
Vendor: Belkin	Target Platform: Android
Model: WeMo Crockpot	Package Name: com.belkin.wemoandroid
Firmware Version: WeMo_WW_2.00.10926.PVT-OWRT-Jarden	Package Version: 1.19.0
Evaluation Date: 03/20/2018	Evaluation Date: 01/24/2018

Device Score - 71.43% (C)

Property	Score	Why is this important?
Internet Pairing ^(?)	3/3	Explain
Configuration ^(?)	7/7	Explain
Upgradability ^(?)	1/4	Explain
Exposesed Services ^(?)	0/4	Explain
Vulnerabilities Low (CVSS) ^(?)	1/3	Explain
Vulnerabilities Medium (CVSS) ^(?)	0/4	Explain
Vulnerabilities High (CVSS) ^(?)	0/7	Explain
Vulnerabilities Critical (CVSS) ^(?)	0/10	Explain
Total	12/42	Total score for the device component, higher is worst

Mobile Score - 92.31% (A)

Property	Score	Why is this important?
Sensitive Data ^(?)	0/6	Explain
Programming Errors ^(?)	0/4	Explain
Excess Permissions ^(?)	1/3	Explain
Total	1/13	Total score for the device component, higher is worst

Cloud Score - 42.39% (F)

Property	Score	Why is this important?
First-party endpoints ^(?)	1/3	Explain
Third-party endpoints ^(?)	3/5	Explain
Hybrid endpoints ^(?)	2/4	Explain
Self-Signed Certificates ^(?)	0/10	Explain
Name Mismatch on Certificate ^(?)	0/10	Explain
Vulnerable TLS/SSL version ^(?)	10/10	Explain
Unsupported OS ^(?)	11/11	Explain
Information Disclosure ^(?)	12/12	Explain
Cleartext Authentication ^(?)	0/13	Explain
Exploitable Services ^(?)	14/14	Explain
Total	53/92	Total score for the device component, higher is worst

Network Score - 64.29% (D)

Property	Score	Why is this important?
Third-party DNS ^(?)	0/2	Explain
HTTP ^(?)	0/1	Explain
UPnP ^(?)	2/2	Explain
NTPv3 ^(?)	0/1	Explain
Custom Protocol ^(?)	2/2	Explain
MITM Device-to-Cloud ^(?)	0/4	Explain
MITM Mobile-to-Cloud ^(?)	0/4	Explain
MITM Mobile-to-Device ^(?)	0/2	Explain
Encryption Device-to-Cloud ^(?)	2/4	Explain
Encryption Mobile-to-Cloud ^(?)	2/4	Explain
Encryption Mobile-to-Device ^(?)	2/2	Explain
Total	10/28	Total score for the device component, higher is worst