Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2018-3918
HistoryAug 27, 2018 - 3:29 p.m.

Cross site request forgery (csrf)

2018-08-2715:29:00
PRIOn knowledge base
www.prio-n.com
4

0.001 Low

EPSS

Percentile

40.6%

JSON

An exploitable vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process listens on port 39500 and relays any unauthenticated messages to SmartThings’ remote servers, which incorrectly handle camera IDs for the ‘sync’ operation, leading to arbitrary deletion of cameras. An attacker can send an HTTP request to trigger this vulnerability.

CPENameOperatorVersion
sth-eth-250_firmwareeq0.20.17

Related

talos 1
seebug 1
nvd 1
cve 1
cvelist 1
talosblog 1
talos
talos
Samsung SmartThings Hub hubCore port 39500 sync denial-of-service vulnerability
2018-07-26 00:00:00
seebug
seebug
Samsung SmartThings Hub hubCore port 39500 sync denial-of-service vulnerability(CVE-2018-3918)
2018-07-30 00:00:00
nvd
nvd
CVE-2018-3918
2018-08-27 15:29:01
cve
cve
CVE-2018-3918
2018-08-27 15:29:01
cvelist
cvelist
CVE-2018-3918
2018-07-26 00:00:00
talosblog
talosblog
Vulnerability Spotlight: Multiple Vulnerabilities in Samsung SmartThings Hub
2018-07-26 08:06:00

0.001 Low

EPSS

Percentile

40.6%

JSON
Related for PRION:CVE-2018-3918
talos1seebug1nvd1cve1cvelist1talosblog1