CVE-2017-16347

CVE-2017-16347 affects Insteon Hub firmware 1012 via the PubNub Pub/Sub message handler on channel cc. The vulnerability arises when handling JSON requests (cmd/ sn_sonos_cmd/ s_vol) where the code copies values with strcpy into small buffers and a subsequent write targets a global buffer at 0xa0...