CVE-2017-16320

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16318

CVE-2017-16318 affects Insteon Hub firmware version 1012. The vulnerability lies in the PubNub message handler for the channel “cc,” where unbounded use of strcpy overwrites fixed-size stack buffers (e.g., 32-byte buffers for keys like cmd/usr/pwd, up to 244-byte buffers in certain paths). This c...

CVE-2017-16307

Summary: CVE-2017-16307 and related entries describe multiple stack-based buffer overflow vulnerabilities in the Insteon Hub PubNub message handler for the “cc” channel (firmware 1012). The overflow occurs when untrusted JSON fields are copied with strcpy into fixed-size stack buffers (e.g., buf_...

CVE-2017-16311

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16308

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16314

Insteon Hub CVE-2017-16314 affects the PubNub-based message handler for channel cc on firmware 1012. The issue is a stack-based buffer overflow caused by unconstrained strcpy usage when handling various JSON fields (notably s_speaker and s_auth-related keys). The overflow occurs in 32-byte buffer...

CVE-2017-16312

CVE-2017-16312 affects Insteon Hub firmware 1012 (PubNub PubNub channel “cc”). The vulnerability arises from unconstrained strcpy calls during JSON command parsing (e.g., s_sonos/sn_discover, s_auth/usr/pwd, cmd fields), allowing stack-based buffer overflows and potential code execution. Attacker...

CVE-2017-16308

Insteon Hub (firmware 1012) has multiple stack-based buffer overflow vulnerabilities in the PubNub message handler for the cc channel. The root cause is unbounded strcpy calls copying JSON fields (e.g., cmd, usr, pwd, cmd2) into fixed-size stack buffers, enabling potential code execution. Public ...

CVE-2017-16311

CVE-2017-16311 affects Insteon Hub firmware 1012 via the PubNub-based CC channel. The flaw is a stack-based buffer overflow triggered by unconstrained strcpy usage in the UpdateCheck command, allowing potential arbitrary data overwrite after sending an authenticated HTTP request. Public writeups ...

CVE-2017-16310

Summary of findings (CVE-2017-16310, Insteon Hub v1012) Multiple stack-based buffer overflow vulnerabilities exist in the PubNub message handler for the channel “cc” (firmware 1012). The flaw arises from unconstrained strcpy copies (for keys such as ch, cmd, usr, pwd, etc.) into small local buffe...

CVE-2017-16313

Insteon Hub (firmware 1012) has multiple stack-based buffer overflow vulnerabilities in the PubNub PubNub PubNub PubNub message handler for the \

CVE-2017-16305

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16300

Insteon Hub, firmware 1012, contains multiple stack-based buffer overflow vulnerabilities in the PubNub message handler for the cc channel. The flaw stems from unbounded strcpy writes when parsing JSON fields (e.g., id, usr, pwd, cmd), allowing overflow of 32-byte buffers on the stack and potenti...

CVE-2017-16306

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16303

Consolidated from TALOS-2017-0483: Insteon Hub, firmware 1012, PubNub PubNub message handler on channel “cc” contains multiple stack-based buffer overflow vulnerabilities triggered by unconstrained strcpy from JSON fields (e.g., cmd, usr, pwd, etc.). The vulnerable flow occurs during command pars...

CVE-2017-16301

CVE-2017-16301 describes multiple stack-based buffer overflow vulnerabilities in the Insteon Hub PubNub PubSub handler on channel “cc” for firmware version 1012. The weaknesses stem from unconstrained strcpy calls that copy user-controlled values (e.g., cmd, usr, pwd, flg) into fixed-size stack b...

CVE-2017-16306

Summary (CVE-2017-16306) Multiple stack-based buffer overflow vulnerabilities exist in the Insteon Hub PubNub PubNub message handler on channel “cc” (firmware 1012). The vulnerabilities arise when the JSON values of various fields (e.g., cmd, sn_exw, s_auth, usr, pwd, etc.) are copied with strcpy...

CVE-2017-16306

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16302

Insteon Hub, firmware 1012, has multiple stack-based buffer overflow vulnerabilities in the PubNub PubNub message handler for channel “cc”. The issue arises from unbounded strcpy copies of JSON fields (cmd, usr, pwd, cmd1, etc.) into fixed-size buffers on the stack, enabling overflow and potentia...

CVE-2017-16303

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...