CyberSec.Space Logo
Back to CVE Browser

CVE-2017-14446

CRITICAL
9.9
CVSS Severity Score
EPSS Score0.1380%
EPSS Percentile2.04th
PublishedAug 2, 2018
Last ModifiedNov 21, 2024

Vulnerability Description

An exploitable stack-based buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation unsafely extracts parameters from the query string, leading to a buffer overflow on the stack. An attacker can send an HTTP GET request to trigger this vulnerability.

Affected Platforms (CPE)

💻
Insteon

Hub Firmware

= 1012

References & Advisories

🔗 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0495
🔗 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0495

Related Vulnerabilities

CVE-2018-390710.0

An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Fi...

CVE-2017-144459.9

An exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation i...

CVE-2017-144449.9

An exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation i...

CVE-2017-163389.9

An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. A...