Lucene search
PRIOn knowledge basePRION:CVE-2018-3856HistoryAug 23, 2018 - 10:29 p.m.
Command injection
2018-08-2322:29:00
PRIOn knowledge base
www.prio-n.com
2
An exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The device incorrectly handles spaces in the URL field, leading to an arbitrary operating system command injection. An attacker can send a series of HTTP requests to trigger this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sth-eth-250_firmware | eq | 0.20.17 |
Related
seebug
seebug
nvd
nvd
CVE-2018-3856
2018-08-23 22:29:00
cve
cve
CVE-2018-3856
2018-08-23 22:29:00
cvelist
cvelist
CVE-2018-3856
2018-07-26 00:00:00
talos
talos
talosblog
talosblog
Vulnerability Spotlight: Multiple Vulnerabilities in Samsung SmartThings Hub
2018-07-26 08:06:00