CVE-2017-16338

CRITICAL

9.9

Description

An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01bad0 the value for the host key is copied using strcpy to the buffer at 0xa00016e0. This buffer is 32 bytes large, sending anything longer will cause a buffer overflow.

CVE Details

CVSS v3.1 Score9.9

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published8/2/2018

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

insteon:hubinsteon:hub_firmware

Weaknesses (CWE)

CWE-120

References

https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484(talos-cna@cisco.com)

https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.