CVE-2017-16281

Insteon Hub (firmware 1012) has multiple buffer overflow vulnerabilities in the PubNub message handler for the cc channel. The root cause is unconstrained strcpy writes when parsing JSON fields (notably sub in s_net, 32-byte buffer at sp+0x2b0), allowing stack-based overflows that can overwrite d...

CVE-2017-16286

The CVE-2017-16286 family describes multiple stack-based buffer overflow vulnerabilities in the Insteon Hub PubNub message handler (channel “cc”) on firmware 1012. The core issue is unbounded strcpy calls copying JSON fields (e.g., dststart, usr, pwd, cmd) into fixed-size buffers (as small as 16 ...

CVE-2017-16283

Multi-source documents confirm CVE-2017-16283 affects Insteon Hub (firmware 1012) via PubNub message handler on channel “cc”. The core vulnerability is stack-based buffer overflow caused by unconstrained strcpy calls when parsing JSON fields (e.g., name, usr, pwd) in the s_name and s_auth command...

CVE-2017-16282

CVE-2017-16282 describes multiple stack-based buffer overflow vulnerabilities in Insteon Hub firmware 1012, occurring in the PubNub message handler on channel “cc.” The flaw occurs when parsing JSON fields (e.g., cmd, usr, pwd, dhcp) via unbounded strcpy into fixed-size buffers, enabling overflow...

CVE-2017-16281

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16285

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16287

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16286

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16288

CVE-2017-16288 affects Insteon Hub (firmware 1012) via the PubNub Pub/Sub handler on channel “cc.” The vulnerable code uses strcpy to copy JSON fields (e.g., dst, usr, pwd, cmd) into fixed-size stack buffers, enabling stack-based buffer overflows. This can overwrite data and is triggered by an au...

CVE-2017-16284

Insteon Hub (Firmware 1012) is affected by multiple stack-based buffer overflow vulnerabilities in the PubNub message handler for the “cc” channel. The issue stems from unconstrained uses of strcpy into small fixed-size buffers (e.g., city/name fields), allowing an authenticated HTTP request to o...

CVE-2017-16285

CVE-2017-16285 affects Insteon Hub firmware 1012 via PubNub PubNub PubNub PubNub: multiple stack-based buffer overflow vulnerabilities in the PubNub message handler for channel “cc” caused by unbounded strcpy copies into fixed-size buffers during JSON parameter parsing (e.g., s_time offset and ma...

CVE-2017-16276

Summary of CVE-2017-16276 (Insteon Hub) : The Insteon Hub (firmware 1012) PubNub message handler on channel “cc” contains multiple stack-based buffer overflow vulnerabilities triggered by malformed JSON in the authenticated HTTP request. In particular, the code copies user-supplied strings (for k...

CVE-2017-16280

CVE-2017-16280 affects Insteon Hub firmware 1012. The PubNub PubNub message handler for channel “cc”/other channels uses unconstrained strcpy into fixed-size buffers (e.g., 32-byte buffers) while parsing JSON commands such as s_net, s_auth, etc. The result is stack-based buffer overflows that can...

CVE-2017-16279

CVE-2017-16279 affects Insteon Hub (firmware 1012) via the PubNub PubNub PubNub CC channel. The vulnerability stems from unconstrained strcpy calls when parsing JSON fields (cmd, usr, pwd, port, etc.) in the s_net and related commands, enabling a stack-based buffer overflow that can overwrite dat...

CVE-2017-16276

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16278

CVE-2017-16278 affects Insteon Hub firmware 1012 (PubNub PubNub cc channel). The issue is a stack-based buffer overflow caused by unconstrained strcpy copies of json fields (e.g., ip in s_net) into fixed-size buffers (e.g., 100-byte buf at sp+0x2d0). The PubNub message handler parses multiple com...

CVE-2017-16279

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16277

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16277

CVE-2017-16277 affects Insteon Hub (firmware 1012) via the PubNub PubNub message handler on the cc channel. The vulnerability is a set of stack-based buffer overflows caused by unbounded strcpy calls when parsing JSON parameters (e.g., cmd, s_auth/usr/pwd, gcmd), allowing an attacker to overwrite...

CVE-2017-16275

Summary: CVE-2017-16275 covers multiple stack-based buffer overflow vulnerabilities in the Insteon Hub PubNub PubNub message handler on channel “cc” (firmware 1012). The payloads parsed from PubNub JSON are copied with strcpy into very small buffers (examples show an 8-byte buffer for the grp fie...