CVE-2017-14443

Summary of CVE-2017-14443 : Insteon Hub firmware 1012 contains an information-leak due to a faulty HTTP GET parameter handling in the HTTPServer/HTTPExecuteGet code path. An authenticated attacker can craft a request to trigger an arbitrarily controlled read of device memory by abusing how GET pa...

Insteon Hub HTTPExecuteGet Firmware Update Information Leak Vulnerability(CVE-2017-14443)

Summary An exploitable information leak vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation incorrectly checks the number of GET parameters supplied, leading to an arbitrarily controlled information leak on the whole device memory. An attacker can sen...