Buffer overflow

2018-08-0219:29:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.8%

JSON

An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c284 the value for the s_vol_brt_delta key is copied using strcpy to the buffer at 0xa0000510. This buffer is 4 bytes large, sending anything longer will cause a buffer overflow.

CPENameOperatorVersion
hub_firmwareeq1012

CPE	Name	Operator	Version
	hub_firmware	eq	1012

References

www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484