Lucene search
PRIOn knowledge basePRION:CVE-2018-3927HistoryAug 27, 2018 - 3:29 p.m.
Information disclosure
2018-08-2715:29:00
PRIOn knowledge base
www.prio-n.com
2
An exploitable information disclosure vulnerability exists in the crash handler of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. When hubCore crashes, Google Breakpad is used to record minidumps, which are sent over an insecure HTTPS connection to the backtrace.io service, leading to the exposure of sensitive data. An attacker can impersonate the remote backtrace.io server in order to trigger this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sth-eth-250_firmware | eq | 0.20.17 |
Related
seebug
seebug
cvelist
cvelist
CVE-2018-3927
2018-07-26 00:00:00
talos
talos
cve
cve
CVE-2018-3927
2018-08-27 15:29:01
nvd
nvd
CVE-2018-3927
2018-08-27 15:29:01
threatpost
threatpost
Bugs in Samsung IoT Hub Leave Smart Home Open To Attack
2018-07-26 19:26:16
talosblog
talosblog
Vulnerability Spotlight: Multiple Vulnerabilities in Samsung SmartThings Hub
2018-07-26 08:06:00