CVE-2017-16264

CVE-2017-16264 affects Insteon Hub firmware 1012 via the PubNub message handler on channel “cc.” The vulnerability is a stack-based buffer overflow caused by unbounded strcpy into small buffers (8 bytes for grp, 16/32/100-byte buffers elsewhere) during JSON parameter parsing (e.g., cmd, usr, pwd,...