CVE-2017-16343

An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c284 the value for the svolbrtdelta key is copied using strcpy to the buffer at 0xa0000510. This buffer is 4 bytes large, sending anything longer will cause a...

CVE-2017-16343

An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c284 the value for the svolbrtdelta key is copied using strcpy to the buffer at 0xa0000510. This buffer is 4 bytes large, sending anything longer will cause a...

CVE-2017-16343

CVE-2017-16343 affects Insteon Hub firmware 1012, where a strcpy-based overflow targets a small buffer used for s_vol_brt_delta when handling PubNub/HTTP JSON commands. The described access pattern copies a 4-byte buffer into a RAM location (global_s_vol at 0xa0001700) via an unconstrained src fo...