CVE-2017-16278

CVE-2017-16278 affects Insteon Hub firmware 1012 (PubNub PubNub cc channel). The issue is a stack-based buffer overflow caused by unconstrained strcpy copies of json fields (e.g., ip in s_net) into fixed-size buffers (e.g., 100-byte buf at sp+0x2d0). The PubNub message handler parses multiple com...