CVE-2017-16310

Summary of findings (CVE-2017-16310, Insteon Hub v1012) Multiple stack-based buffer overflow vulnerabilities exist in the PubNub message handler for the channel “cc” (firmware 1012). The flaw arises from unconstrained strcpy copies (for keys such as ch, cmd, usr, pwd, etc.) into small local buffe...

CVE-2017-16312

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16314

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16312

CVE-2017-16312 affects Insteon Hub firmware 1012 (PubNub PubNub channel “cc”). The vulnerability arises from unconstrained strcpy calls during JSON command parsing (e.g., s_sonos/sn_discover, s_auth/usr/pwd, cmd fields), allowing stack-based buffer overflows and potential code execution. Attacker...

CVE-2017-16313

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16308

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16314

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16307

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16311

CVE-2017-16311 affects Insteon Hub firmware 1012 via the PubNub-based CC channel. The flaw is a stack-based buffer overflow triggered by unconstrained strcpy usage in the UpdateCheck command, allowing potential arbitrary data overwrite after sending an authenticated HTTP request. Public writeups ...

CVE-2017-16309

CVE-2017-16309 affects Insteon Hub firmware 1012. Multiple stack-based buffer overflow vulnerabilities occur in the PubNub message handler for channel cc, triggered by authenticated HTTP requests. The vulnerability stems from unconstrained strcpy calls into small stack buffers (e.g., buf_cmd, buf...

CVE-2017-16307

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16309

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16310

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16309

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16308

Insteon Hub (firmware 1012) has multiple stack-based buffer overflow vulnerabilities in the PubNub message handler for the cc channel. The root cause is unbounded strcpy calls copying JSON fields (e.g., cmd, usr, pwd, cmd2) into fixed-size stack buffers, enabling potential code execution. Public ...

CVE-2017-16307

Summary: CVE-2017-16307 and related entries describe multiple stack-based buffer overflow vulnerabilities in the Insteon Hub PubNub message handler for the “cc” channel (firmware 1012). The overflow occurs when untrusted JSON fields are copied with strcpy into fixed-size stack buffers (e.g., buf_...

CVE-2017-16310

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16311

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16308

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2017-16311

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...