Lucene search
PRIOn knowledge basePRION:CVE-2018-3895HistoryAug 28, 2018 - 7:29 p.m.
Buffer overflow
2018-08-2819:29:00
PRIOn knowledge base
www.prio-n.com
1
An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core’s HTTP server of Samsung SmartThings Hub STH-ETH-250 Firmware version 0.20.17. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily long ‘endTime’ value in order to exploit this vulnerability. An attacker can send an HTTP request to trigger this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sth-eth-250_firmware | eq | 0.20.17 |
Related
nvd
nvd
CVE-2018-3895
2018-08-28 19:29:19
cve
cve
CVE-2018-3895
2018-08-28 19:29:19
cvelist
cvelist
CVE-2018-3895
2018-07-26 00:00:00
talos
talos
Samsung SmartThings Hub video-core clips Code Execution Vulnerability
2018-07-26 00:00:00
seebug
seebug