CVE-2017-16289

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16289

CVE-2017-16289 is confirmed via connected TALOS documentation to affect Insteon Hub firmware 1012, specifically the PubNub message handler for channel “cc.” The vulnerability is a set of stack-based buffer overflows triggered when parsing JSON commands through PubNub: the code copies strings (cmd...