Lucene search
PRIOn knowledge basePRION:CVE-2018-3926HistoryAug 28, 2018 - 5:29 p.m.
Integer overflow
2018-08-2817:29:00
PRIOn knowledge base
www.prio-n.com
2
An exploitable integer underflow vulnerability exists in the ZigBee firmware update routine of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process incorrectly handles malformed files existing in its data directory, leading to an infinite loop, which eventually causes the process to crash. An attacker can send an HTTP request to trigger this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sth-eth-250_firmware | eq | 0.20.17 |
Related
seebug
seebug
cvelist
cvelist
CVE-2018-3926
2018-07-26 00:00:00
nvd
nvd
CVE-2018-3926
2018-08-28 17:29:02
talos
talos
cve
cve
CVE-2018-3926
2018-08-28 17:29:02
threatpost
threatpost
Bugs in Samsung IoT Hub Leave Smart Home Open To Attack
2018-07-26 19:26:16
talosblog
talosblog
Vulnerability Spotlight: Multiple Vulnerabilities in Samsung SmartThings Hub
2018-07-26 08:06:00