CVE-2017-16329

CVE-2017-16329 affects Insteon Hub (firmware 1012) via the PubNub message handler on channel “cc.” The vulnerability is a stack-based buffer overflow caused by uncontrolled strcpy usage when processing JSON fields (notably s_event_delay) in authenticated HTTP requests. The vulnerability is demons...

CVE-2017-16326

CVE-2017-16326 affects Insteon Hub firmware 1012 via the PubNub PubNub pubnub_sonos-like message handler on channel cc. The vulnerability is a stack-based buffer overflow caused by unconstrained strcpy calls when parsing JSON fields (e.g., cmd, usr, pwd) in the pubnub handler, enabling data overw...

CVE-2017-16331

CVE-2017-16331 is a real vulnerability affecting Insteon Hub firmware 1012, described in the connected Talos report as multiple stack-based buffer overflow flaws in the PubNub-based CC channel message handler. The root cause is unconstrained strcpy calls into small stack buffers when parsing JSON...

CVE-2017-16332

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16327

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16330

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16332

CVE-2017-16332 describes multiple stack-based buffer overflow vulnerabilities in the Insteon Hub PubNub message handler for channel “cc” on firmware 1012. The overflow occurs when unvalidated strings (e.g., usr, pwd, cmd, s_aid) are copied with strcpy into fixed-size buffers, enabling potential a...

CVE-2017-16330

CVE-2017-16330 affects Insteon Hub (firmware 1012) through the PubNub PubNub message handler on channel cc. The vulnerability is a set of stack-based buffer overflows caused by unbounded strcpy calls when parsing JSON fields (e.g., s_event_group, usr, pwd, etc.). An attacker can trigger the overf...

CVE-2017-16325

The CVE targets Insteon Hub with firmware version 1012, specifically the PubNub PubNub PubNub-based “cc” channel message handler. Vulnerability: multiple stack-based buffer overflows caused by unbounded strcpy writes into 32-byte buffers when parsing JSON commands (e.g., s_auth, usr, pwd, etc.). ...

CVE-2017-16324

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16322

CVE-2017-16322 concerns Insteon Hub firmware 1012. The PubNub message handler for the “cc” channel contains multiple stack-based buffer overflow vulnerabilities caused by unconstrained strcpy calls when processing JSON keys (notably cmd, usr, pwd, c_group, s_sonos_cmd, etc.). An attacker can trig...

CVE-2017-16322

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16324

CVE-2017-16324 concerns Insteon Hub firmware 1012, where the PubNub message handler for channel “cc” contains multiple stack-based buffer overflow vulnerabilities. The root cause is unconstrained use of strcpy into fixed-size buffers when processing JSON commands (e.g., s_auth, usr, pwd and many ...

CVE-2017-16323

CVE-2017-16323 affects Insteon Hub (firmware 1012) via the PubNub PubNub channel “cc.” The issue is multiple stack-based buffer overflows in the PubNub message handler, caused by unbounded strcpy calls when parsing JSON fields (e.g., cmd, s_auth usr/pwd, s_sonos, s_group, etc.). The vulnerability...

CVE-2017-16319

CVE-2017-16319 affects Insteon Hub, firmware version 1012, via the PubNub PubNub message handler on channel “cc.” The vulnerability stems from multiple stack-based buffer overflows caused by unbounded strcpy copies into small stack buffers when parsing JSON commands (e.g., s_auth, g_sonos_index, ...

CVE-2017-16320

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16317

CVE-2017-16317 affects Insteon Hub (firmware 1012) via the PubNub message handler on channel cc. The vulnerability is a set of stack-based buffer overflows caused by unconstrained strcpy calls when parsing JSON commands (e.g., s_sonos, s_auth, g_group, etc.). An authenticated HTTP request can tri...

CVE-2017-16318

CVE-2017-16318 affects Insteon Hub firmware version 1012. The vulnerability lies in the PubNub message handler for the channel “cc,” where unbounded use of strcpy overwrites fixed-size stack buffers (e.g., 32-byte buffers for keys like cmd/usr/pwd, up to 244-byte buffers in certain paths). This c...

CVE-2017-16320

CVE-2017-16320 affects Insteon Hub (firmware 1012). The PubNub message handler for the cc channel contains multiple stack-based buffer overflows triggered by copying user-provided JSON fields (e.g., s_sonos_cmd, usr, pwd) with strcpy into fixed-size buffers (generally 32 bytes). An authenticated ...

CVE-2017-16316

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...