CVE-2017-16318

CVE-2017-16318 affects Insteon Hub firmware version 1012. The vulnerability lies in the PubNub message handler for the channel “cc,” where unbounded use of strcpy overwrites fixed-size stack buffers (e.g., 32-byte buffers for keys like cmd/usr/pwd, up to 244-byte buffers in certain paths). This c...

CVE-2017-16315

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16316

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16317

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16320

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16321

Insteon Hub PubNub "cc" channel (firmware 1012) has multiple stack-based buffer overflow vulnerabilities in the JSON command parsing path. The code uses strcpy into small buffers during handling commands (e.g., s_auth usr/pwd, cmd fields, s_sonos, g_sonos, etc.), enabling overflow on the stack. A...

CVE-2017-16316

CVE-2017-16316 pertains to Insteon Hub (firmware 1012) and affects the PubNub PubNub message handler for the "cc" channel. Multiple stack-based buffer overflow vulnerabilities arise from unconstrained use of strcpy when parsing JSON commands (e.g., buf_cmd, buf_usr, buf_pwd) inside the channel ha...

CVE-2017-16317

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16313

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16310

Summary of findings (CVE-2017-16310, Insteon Hub v1012) Multiple stack-based buffer overflow vulnerabilities exist in the PubNub message handler for the channel “cc” (firmware 1012). The flaw arises from unconstrained strcpy copies (for keys such as ch, cmd, usr, pwd, etc.) into small local buffe...

CVE-2017-16314

Insteon Hub CVE-2017-16314 affects the PubNub-based message handler for channel cc on firmware 1012. The issue is a stack-based buffer overflow caused by unconstrained strcpy usage when handling various JSON fields (notably s_speaker and s_auth-related keys). The overflow occurs in 32-byte buffer...

CVE-2017-16312

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16308

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16312

CVE-2017-16312 affects Insteon Hub firmware 1012 (PubNub PubNub channel “cc”). The vulnerability arises from unconstrained strcpy calls during JSON command parsing (e.g., s_sonos/sn_discover, s_auth/usr/pwd, cmd fields), allowing stack-based buffer overflows and potential code execution. Attacker...

CVE-2017-16307

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16314

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16314

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16309

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16309

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16308

Insteon Hub (firmware 1012) has multiple stack-based buffer overflow vulnerabilities in the PubNub message handler for the cc channel. The root cause is unbounded strcpy calls copying JSON fields (e.g., cmd, usr, pwd, cmd2) into fixed-size stack buffers, enabling potential code execution. Public ...