CVE-2017-16254

CVE-2017-16254 affects Insteon Hub 2245-222 (firmware 1012). The vulnerability is a stack-based buffer overflow in the PubNub message handler, caused by unconstrained strcpy operations when parsing JSON fields (e.g., flg, usr, pwd). Attack vectors shown in PoCs involve authenticated HTTP requests...