CVE-2017-16280

CVE-2017-16280 affects Insteon Hub firmware 1012. The PubNub PubNub message handler for channel “cc”/other channels uses unconstrained strcpy into fixed-size buffers (e.g., 32-byte buffers) while parsing JSON commands such as s_net, s_auth, etc. The result is stack-based buffer overflows that can...