CVE-2017-16323

CVE-2017-16323 affects Insteon Hub (firmware 1012) via the PubNub PubNub channel “cc.” The issue is multiple stack-based buffer overflows in the PubNub message handler, caused by unbounded strcpy calls when parsing JSON fields (e.g., cmd, s_auth usr/pwd, s_sonos, s_group, etc.). The vulnerability...