CVE-2017-14446

An exploitable stack-based buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation unsafely extracts parameters from the query string, leading to a buffer overflow on the stack. An attacker can send an HTTP GET request to trigger this...

CVE-2017-14446

CVE-2017-14446 affects Insteon Hub firmware 1012. The HTTP server’s HTTPExecuteGet extracts GET parameters into a small local array (room for 5 pointers) without enforcing a limit, so supplying more than 4 parameters overruns the stack and can overwrite return/register state. Exploitation demonst...

Insteon Hub HTTPExecuteGet Parameters Extraction Code Execution Vulnerability(CVE-2017-14446)

Summary An exploitable stack-based buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation unsafely extracts parameters from the query string, leading to a buffer overflow on the stack. An attacker can send an HTTP GET request to trigger...