CVE-2017-16335

CVE-2017-16335 affects Insteon Hub firmware 1012 via the PubNub message handler on channel “cc”. The vulnerability is a set of stack-based buffer overflows triggered by unconstrained uses of strcpy when parsing JSON fields (e.g., s_offset, usr, pwd) in the s_event_var path among others, allowing ...