CVE-2017-16326

CVE-2017-16326 affects Insteon Hub firmware 1012 via the PubNub PubNub pubnub_sonos-like message handler on channel cc. The vulnerability is a stack-based buffer overflow caused by unconstrained strcpy calls when parsing JSON fields (e.g., cmd, usr, pwd) in the pubnub handler, enabling data overw...

CVE-2017-16329

CVE-2017-16329 affects Insteon Hub (firmware 1012) via the PubNub message handler on channel “cc.” The vulnerability is a stack-based buffer overflow caused by uncontrolled strcpy usage when processing JSON fields (notably s_event_delay) in authenticated HTTP requests. The vulnerability is demons...

CVE-2017-16327

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16330

CVE-2017-16330 affects Insteon Hub (firmware 1012) through the PubNub PubNub message handler on channel cc. The vulnerability is a set of stack-based buffer overflows caused by unbounded strcpy calls when parsing JSON fields (e.g., s_event_group, usr, pwd, etc.). An attacker can trigger the overf...

CVE-2017-16327

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16331

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16329

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16331

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16327

Summary (CVE-2017-16327) The Insteon Hub PubNub “cc” channel contains multiple stack-based buffer overflow vulnerabilities in the JSON handling path. The vulnerable code copies arbitrary strings (e.g., cmd, s_auth usr/pwd, etc.) into fixed-size buffers (as small as 8–100 bytes, many 32-byte buffe...

CVE-2017-16324

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16325

The CVE targets Insteon Hub with firmware version 1012, specifically the PubNub PubNub PubNub-based “cc” channel message handler. Vulnerability: multiple stack-based buffer overflows caused by unbounded strcpy writes into 32-byte buffers when parsing JSON commands (e.g., s_auth, usr, pwd, etc.). ...

CVE-2017-16322

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16321

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16315

CVE-2017-16315 Impact: Insteon Hub (firmware 1012) PubNub Pubnub channel “cc” code; multiple stack-based buffer overflows caused by unconstrained strcpy during JSON field extraction (e.g., cmd, s_auth usr/pwd, s_sonos, etc.). Vulnerable component is the PubNub message handler parsing JSON and cop...

CVE-2017-16317

CVE-2017-16317 affects Insteon Hub (firmware 1012) via the PubNub message handler on channel cc. The vulnerability is a set of stack-based buffer overflows caused by unconstrained strcpy calls when parsing JSON commands (e.g., s_sonos, s_auth, g_group, etc.). An authenticated HTTP request can tri...

CVE-2017-16320

CVE-2017-16320 affects Insteon Hub (firmware 1012). The PubNub message handler for the cc channel contains multiple stack-based buffer overflows triggered by copying user-provided JSON fields (e.g., s_sonos_cmd, usr, pwd) with strcpy into fixed-size buffers (generally 32 bytes). An authenticated ...

CVE-2017-16320

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16312

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16314

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16310

Summary of findings (CVE-2017-16310, Insteon Hub v1012) Multiple stack-based buffer overflow vulnerabilities exist in the PubNub message handler for the channel “cc” (firmware 1012). The flaw arises from unconstrained strcpy copies (for keys such as ch, cmd, usr, pwd, etc.) into small local buffe...