Lucene search
PRIOn knowledge basePRION:CVE-2018-3894HistorySep 21, 2018 - 3:29 p.m.
Buffer overflow
2018-09-2115:29:00
PRIOn knowledge base
www.prio-n.com
1
An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core’s HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily long “startTime” value in order to exploit this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sth-eth-250_firmware | eq | 0.20.17 |
Related
cve
cve
CVE-2018-3894
2018-09-21 15:29:00
cvelist
cvelist
CVE-2018-3894
2018-07-26 00:00:00
nvd
nvd
CVE-2018-3894
2018-09-21 15:29:00
talos
talos
Samsung SmartThings Hub video-core clips Code Execution Vulnerability
2018-07-26 00:00:00
seebug
seebug