CVE-2017-16342 An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c254 the value for the s_vol_dim_delta key is copied using str...
CriticalCVSS 9.9
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c254 the value for the s_vol_dim_delta key is copied using strcpy to the buffer at 0xa0000514. This buffer is 4 bytes large, sending anything longer will cause a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| insteon hub firmware | = 1012 | No fix listed |
| Insteon | = Insteon Hub 2245-222 - Firmware version 1012 | No fix listed |
References
- www.talosintelligence.com exploit third-party-advisory