CVE-2017-16286

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16286

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16286

The CVE-2017-16286 family describes multiple stack-based buffer overflow vulnerabilities in the Insteon Hub PubNub message handler (channel “cc”) on firmware 1012. The core issue is unbounded strcpy calls copying JSON fields (e.g., dststart, usr, pwd, cmd) into fixed-size buffers (as small as 16 ...