CVE-2017-16279

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16279

CVE-2017-16279 affects Insteon Hub (firmware 1012) via the PubNub PubNub PubNub CC channel. The vulnerability stems from unconstrained strcpy calls when parsing JSON fields (cmd, usr, pwd, port, etc.) in the s_net and related commands, enabling a stack-based buffer overflow that can overwrite dat...