Critical Buffer Overflow Vulnerability Found in Wemo Mini Smart Plug V2 (CVE-2023-27217)

Just read about the vulnerability found in the Wemo Mini Smart Plug V2, a widely used IoT device. IMO this is pretty concerning as these devices are not only used in homes, but also in business environments.
To keep it brief, the vulnerability, designated CVE-2023-27217, is a buffer overflow that allows remote command injection. This issue stems from the device's 'FriendlyName' feature, which lets users rename the device. The problem arises when the name exceeds 30 characters, causing a buffer …

buffer buffer overflow buffer overflow vulnerability business critical cve cybersecurity device devices environments homes iot iot device overflow smart vulnerability wemo wemo mini smart plug v2