CVE-2017-16277

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16278

CVE-2017-16278 affects Insteon Hub firmware 1012 (PubNub PubNub cc channel). The issue is a stack-based buffer overflow caused by unconstrained strcpy copies of json fields (e.g., ip in s_net) into fixed-size buffers (e.g., 100-byte buf at sp+0x2d0). The PubNub message handler parses multiple com...

CVE-2017-16275

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16279

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16277

CVE-2017-16277 affects Insteon Hub (firmware 1012) via the PubNub PubNub message handler on the cc channel. The vulnerability is a set of stack-based buffer overflows caused by unbounded strcpy calls when parsing JSON parameters (e.g., cmd, s_auth/usr/pwd, gcmd), allowing an attacker to overwrite...

CVE-2017-16275

Summary: CVE-2017-16275 covers multiple stack-based buffer overflow vulnerabilities in the Insteon Hub PubNub PubNub message handler on channel “cc” (firmware 1012). The payloads parsed from PubNub JSON are copied with strcpy into very small buffers (examples show an 8-byte buffer for the grp fie...

CVE-2017-16276

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16273

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16274

CVE-2017-16274 affects Insteon Hub firmware 1012, where multiple stack-based buffer overflow vulnerabilities exist in the PubNub PubNub channel “cc” handler. The vulnerable code copies untrusted input (e.g., grp, usr, pwd, cmd fields) using strcpy into small stack buffers (often 8–32 bytes), enab...

CVE-2017-16271

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16271

Insteon Hub (firmware 1012) contains multiple stack-based buffer overflow vulnerabilities in the PubNub message handler for the cc channel, exploitable via crafted JSON fields copied with strcpy (e.g., as_c, usr, pwd, cmd). The issues are demonstrated across numerous CVEs (e.g., CVE-2017-16271 an...

CVE-2017-16272

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16274

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16271

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16272

CVE-2017-16272 affects Insteon Hub, firmware version 1012, via the PubNub message handler on channel “cc.” The vulnerability is caused by stack-based buffer overflows introduced by unconstrained strcpy calls that copy JSON parameter values into small local buffers (often 8–32 bytes). Several comm...

CVE-2017-16273

CVE-2017-16273 affects Insteon Hub firmware 1012 via the PubNub PubSub handler on channel cc/e_ml, where several vulnerable strcpy calls write user-provided strings into fixed small buffers (e.g., 8-byte grp buffer). This leads to stack-based buffer overflows and potential code execution. The iss...

CVE-2017-16272

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16273

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16274

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16270

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...