CVE-2017-16332

CVE-2017-16332 describes multiple stack-based buffer overflow vulnerabilities in the Insteon Hub PubNub message handler for channel “cc” on firmware 1012. The overflow occurs when unvalidated strings (e.g., usr, pwd, cmd, s_aid) are copied with strcpy into fixed-size buffers, enabling potential a...

CVE-2017-16330

CVE-2017-16330 affects Insteon Hub (firmware 1012) through the PubNub PubNub message handler on channel cc. The vulnerability is a set of stack-based buffer overflows caused by unbounded strcpy calls when parsing JSON fields (e.g., s_event_group, usr, pwd, etc.). An attacker can trigger the overf...

CVE-2017-16331

CVE-2017-16331 is a real vulnerability affecting Insteon Hub firmware 1012, described in the connected Talos report as multiple stack-based buffer overflow flaws in the PubNub-based CC channel message handler. The root cause is unconstrained strcpy calls into small stack buffers when parsing JSON...

CVE-2017-16327

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16328

CVE-2017-16328 affects Insteon Hub (Firm 1012) via PubNub channel “cc.” The vulnerability is a stack-based buffer overflow caused by unconstrained strcpy() copies of JSON fields (e.g., s_event_offset) into small stack buffers (32 bytes). An authenticated HTTP request parsing the channel’s JSON ca...

CVE-2017-16332

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16324

CVE-2017-16324 concerns Insteon Hub firmware 1012, where the PubNub message handler for channel “cc” contains multiple stack-based buffer overflow vulnerabilities. The root cause is unconstrained use of strcpy into fixed-size buffers when processing JSON commands (e.g., s_auth, usr, pwd and many ...

CVE-2017-16324

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16325

The CVE targets Insteon Hub with firmware version 1012, specifically the PubNub PubNub PubNub-based “cc” channel message handler. Vulnerability: multiple stack-based buffer overflows caused by unbounded strcpy writes into 32-byte buffers when parsing JSON commands (e.g., s_auth, usr, pwd, etc.). ...

CVE-2017-16323

CVE-2017-16323 affects Insteon Hub (firmware 1012) via the PubNub PubNub channel “cc.” The issue is multiple stack-based buffer overflows in the PubNub message handler, caused by unbounded strcpy calls when parsing JSON fields (e.g., cmd, s_auth usr/pwd, s_sonos, s_group, etc.). The vulnerability...

CVE-2017-16322

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16322

CVE-2017-16322 concerns Insteon Hub firmware 1012. The PubNub message handler for the “cc” channel contains multiple stack-based buffer overflow vulnerabilities caused by unconstrained strcpy calls when processing JSON keys (notably cmd, usr, pwd, c_group, s_sonos_cmd, etc.). An attacker can trig...

CVE-2017-16315

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16320

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16317

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16317

CVE-2017-16317 affects Insteon Hub (firmware 1012) via the PubNub message handler on channel cc. The vulnerability is a set of stack-based buffer overflows caused by unconstrained strcpy calls when parsing JSON commands (e.g., s_sonos, s_auth, g_group, etc.). An authenticated HTTP request can tri...

CVE-2017-16320

CVE-2017-16320 affects Insteon Hub (firmware 1012). The PubNub message handler for the cc channel contains multiple stack-based buffer overflows triggered by copying user-provided JSON fields (e.g., s_sonos_cmd, usr, pwd) with strcpy into fixed-size buffers (generally 32 bytes). An authenticated ...

CVE-2017-16321

Insteon Hub PubNub "cc" channel (firmware 1012) has multiple stack-based buffer overflow vulnerabilities in the JSON command parsing path. The code uses strcpy into small buffers during handling commands (e.g., s_auth usr/pwd, cmd fields, s_sonos, g_sonos, etc.), enabling overflow on the stack. A...

CVE-2017-16319

CVE-2017-16319 affects Insteon Hub, firmware version 1012, via the PubNub PubNub message handler on channel “cc.” The vulnerability stems from multiple stack-based buffer overflows caused by unbounded strcpy copies into small stack buffers when parsing JSON commands (e.g., s_auth, g_sonos_index, ...

CVE-2017-16316

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...