Lucene search
PRIOn knowledge basePRION:CVE-2018-3879HistoryAug 23, 2018 - 3:29 p.m.
Sql injection
2018-08-2315:29:00
PRIOn knowledge base
www.prio-n.com
2
An exploitable JSON injection vulnerability exists in the credentials handler of video-core’s HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly parses the user-controlled JSON payload, leading to a JSON injection which in turn leads to a SQL injection in the video-core database. An attacker can send a series of HTTP requests to trigger this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sth-eth-250_firmware | eq | 0.20.17 |
Related
talos
talos
cve
cve
CVE-2018-3879
2018-08-23 15:29:00
cvelist
cvelist
CVE-2018-3879
2018-07-26 00:00:00
seebug
seebug
checkpoint_advisories
checkpoint_advisories
Samsung SmartThings Hub SQL Injection (CVE-2018-3879)
2018-08-01 00:00:00
nvd
nvd
CVE-2018-3879
2018-08-23 15:29:00
threatpost
threatpost
Bugs in Samsung IoT Hub Leave Smart Home Open To Attack
2018-07-26 19:26:16
talosblog
talosblog
Vulnerability Spotlight: Multiple Vulnerabilities in Samsung SmartThings Hub
2018-07-26 08:06:00