CyberSec.Space Logo
CVEブラウザに戻る

CVE-2017-14444

CRITICAL
9.9
CVSS Severity Score
EPSS Score0.0270%
EPSS Percentile2.42th
Published2018年8月2日
Last Modified2024年11月21日

Vulnerability Description

An exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation incorrectly handles the URL parameter during a firmware update request, leading to a buffer overflow on a global section. An attacker can send an HTTP GET request to trigger this vulnerability.

Affected Platforms (CPE)

💻
Insteon

Hub Firmware

= 1012

References & Advisories

🔗 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0493
🔗 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0493

関連する脆弱性情報

CVE-2018-390710.0

An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Fi...

CVE-2017-144469.9

An exploitable stack-based buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server impl...

CVE-2017-144459.9

An exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation i...

CVE-2017-163389.9

An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. A...