CVE-2018-3903: Out-of-bounds Write

On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. The memcpy call...

PT-2018-16317

Name of the Vulnerable Software and Affected Versions Samsung SmartThings Hub STH-ETH-250 version 0.20.17 Description A buffer overflow issue exists in the remote video-host communication of the video-core's HTTP server. The video-core process insecurely parses the AWSELB cookie while communicati...

PT-2018-16261 · Samsung · Samsung Smartthings Hub

Name of the Vulnerable Software and Affected Versions: Samsung SmartThings Hub STH-ETH-250 version 0.20.17 Description: A stack-based buffer overflow issue exists in the samsungWifiScan callback notification of the video-core's HTTP server. The video-core process incorrectly handles answers from ...

CVE-2018-3867: Out-of-bounds Write

An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly handles the answer received from a smart camera...

Samsung SmartThings Hub video-core HTTP server buffer overflow vulnerability (CNVD-2018-17077)

Samsung SmartThings Hub is a smart home management device from Samsung, South Korea. video-core HTTP server is one of the HTTP servers. A buffer overflow vulnerability exists in the camera 'update' function of the video-core HTTP server in the Samsung SmartThings Hub, which stems from the...

Samsung SmartThings Hub video-core HTTP server buffer overflow vulnerability (CNVD-2018-17076)

Samsung SmartThings Hub is a smart home management device from Samsung, South Korea. video-core HTTP server is one of the HTTP servers. A buffer overflow vulnerability exists in the camera 'update' function of the video-core HTTP server in the Samsung SmartThings Hub, which stems from the...

Samsung SmartThings Hub video-core HTTP server buffer overflow vulnerability (CNVD-2018-17075)

Samsung SmartThings Hub is a smart home management device from Samsung, South Korea. video-core HTTP server is one of the HTTP servers. A buffer overflow vulnerability exists in the camera 'create' function of the video-core HTTP server in the Samsung SmartThings Hub, which stems from the...

Samsung SmartThings Hub Command Injection Vulnerability

Samsung SmartThings Hub is a smart home management device from Samsung South Korea. A command injection vulnerability exists in the RTSP configuration of the smart camera in the Samsung SmartThings Hub, which stems from the program's failure to properly handle spaces in the URL field. An attacker...

Samsung SmartThings Hub video-core HTTP server buffer overflow vulnerability (CNVD-2018-15900)

Samsung SmartThings Hub is a smart home management device from Samsung, South Korea. video-core HTTP server is one of the HTTP servers. A buffer overflow vulnerability exists in the credentials handler of the video-core HTTP server in the Samsung SmartThings Hub, which originates from the...

Samsung SmartThings Hub video-core HTTP server buffer overflow vulnerability (CNVD-2018-15899)

Samsung SmartThings Hub is a smart home management device from Samsung, South Korea. video-core HTTP server is one of the HTTP servers. A buffer overflow vulnerability exists in the credentials handler of the video-core HTTP server in the Samsung SmartThings Hub, which originates from the...

Samsung SmartThings Hub SQL Injection (CVE-2018-3879)

An SQL injection vulnerability exists in Samsung SmartThings Hub. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Samsung SmartThings Hub video-core HTTP server injection vulnerability

Samsung SmartThings Hub is a smart home management device from Samsung, South Korea. video-core HTTP server is one of the HTTP servers. An injection vulnerability exists in the credentials handler of the video-core HTTP server in the Samsung SmartThings Hub, which is caused by the program not...

Samsung SmartThings Hub hubCore Information Disclosure Vulnerability

Samsung SmartThings Hub is a smart home management device from Samsung South Korea. A security vulnerability exists in the crash handler of the hubCore binary in Samsung SmartThings Hub, which originates from a program that sends logged minidumps to the backtrace.io service over an insecure HTTPS...

Samsung SmartThings Hub Integer Overflow Vulnerability

Samsung SmartThings Hub is a smart home management device from Samsung South Korea. An integer overflow vulnerability exists in the ZigBee firmware update routine for the hubCore binary in Samsung SmartThings Hub, which stems from the hubCore process failing to properly handle malformed files in...

Samsung SmartThings Hub Denial of Service Vulnerability

Samsung SmartThings Hub is a smart home management device from Samsung South Korea. A denial of service vulnerability exists in the remote server in Samsung SmartThings Hub with firmware version 0.20.17, which originates when the hubCore process listening on port 39500 relays unauthenticated...

Samsung SmartThings Hub HTTP Response Splitting Vulnerability

Samsung SmartThings Hub is a smart home management device from Samsung South Korea. An HTTP response splitting vulnerability exists in the remote server in Samsung SmartThings Hub with firmware version 0.20.17, which stems from the program failing to properly handle JSON messages. An attacker can...

Samsung SmartThings Hub video-core HTTP server override vulnerability

Samsung SmartThings Hub is a smart home management device from Samsung, South Korea. video-core HTTP server is one of the HTTP servers. A security vulnerability exists in the REST parser of the video-core HTTP server in the Samsung SmartThings Hub, which arises from the program's failure to...

Samsung SmartThings Hub video-core HTTP server buffer overflow vulnerability

Samsung SmartThings Hub is a smart home management device from Samsung, South Korea. video-core HTTP server is one of the HTTP servers. samsungWifiScan handler is one of the WiFi network discovery handlers. A buffer overflow vulnerability exists in the samsungWifiScan handler of the video-core HT...

Samsung SmartThings Hub video-core HTTP server buffer overflow vulnerability (CNVD-2018-14292)

Samsung SmartThings Hub is a smart home management device from Samsung, South Korea. video-core HTTP server is one of the HTTP servers. samsungWifiScan handler is one of the WiFi network discovery handlers. A buffer overflow vulnerability exists in the samsungWifiScan handler of the video-core HT...

Samsung SmartThings Hub video-core HTTP server buffer overflow vulnerability (CNVD-2018-14291)

Samsung SmartThings Hub is a smart home management device from Samsung, South Korea. video-core HTTP server is one of the HTTP servers. A stack buffer overflow vulnerability exists in the samsungWifiScan callback notification of the video-core HTTP server in the Samsung SmartThings Hub, which ste...