CVE-2017-14447

CVE-2017-14447 describes a stack-based buffer overflow in the Insteon Hub PubNub "ad" channel handler (firmware 1012, Insteon Hub 2245-222). The vulnerability stems from unsafe usage of strcpy when parsing JSON fields (ser and cmd); the source buffer for the strcpy is unconstrained, enabling an o...