CVE-2017-16318

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16321

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16319

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16317

CVE-2017-16317 affects Insteon Hub (firmware 1012) via the PubNub message handler on channel cc. The vulnerability is a set of stack-based buffer overflows caused by unconstrained strcpy calls when parsing JSON commands (e.g., s_sonos, s_auth, g_group, etc.). An authenticated HTTP request can tri...

CVE-2017-16315

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16315

CVE-2017-16315 Impact: Insteon Hub (firmware 1012) PubNub Pubnub channel “cc” code; multiple stack-based buffer overflows caused by unconstrained strcpy during JSON field extraction (e.g., cmd, s_auth usr/pwd, s_sonos, etc.). Vulnerable component is the PubNub message handler parsing JSON and cop...

CVE-2017-16319

CVE-2017-16319 affects Insteon Hub, firmware version 1012, via the PubNub PubNub message handler on channel “cc.” The vulnerability stems from multiple stack-based buffer overflows caused by unbounded strcpy copies into small stack buffers when parsing JSON commands (e.g., s_auth, g_sonos_index, ...

CVE-2017-16319

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16318

CVE-2017-16318 affects Insteon Hub firmware version 1012. The vulnerability lies in the PubNub message handler for the channel “cc,” where unbounded use of strcpy overwrites fixed-size stack buffers (e.g., 32-byte buffers for keys like cmd/usr/pwd, up to 244-byte buffers in certain paths). This c...

CVE-2017-16316

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16320

CVE-2017-16320 affects Insteon Hub (firmware 1012). The PubNub message handler for the cc channel contains multiple stack-based buffer overflows triggered by copying user-provided JSON fields (e.g., s_sonos_cmd, usr, pwd) with strcpy into fixed-size buffers (generally 32 bytes). An authenticated ...

CVE-2017-16318

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16317

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16315

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16320

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16316

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16316

CVE-2017-16316 pertains to Insteon Hub (firmware 1012) and affects the PubNub PubNub message handler for the "cc" channel. Multiple stack-based buffer overflow vulnerabilities arise from unconstrained use of strcpy when parsing JSON commands (e.g., buf_cmd, buf_usr, buf_pwd) inside the channel ha...

CVE-2017-16321

Insteon Hub PubNub "cc" channel (firmware 1012) has multiple stack-based buffer overflow vulnerabilities in the JSON command parsing path. The code uses strcpy into small buffers during handling commands (e.g., s_auth usr/pwd, cmd fields, s_sonos, g_sonos, etc.), enabling overflow on the stack. A...

CVE-2017-16317

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16310

Summary of findings (CVE-2017-16310, Insteon Hub v1012) Multiple stack-based buffer overflow vulnerabilities exist in the PubNub message handler for the channel “cc” (firmware 1012). The flaw arises from unconstrained strcpy copies (for keys such as ch, cmd, usr, pwd, etc.) into small local buffe...