CVE-2018-3879

An exploitable JSON injection vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly parses the user-controlled JSON payload, leading to a JSON injection which in...

CVE-2018-3863

On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. A strcpy overflows t...

CVE-2018-3902

CVE-2018-3902 affects Samsung SmartThings Hub STH-ETH-250 (firmware 0.20.17) with a buffer overflow in the video-core HTTP server’s camera Replace feature. The code copies the user-controlled JSON field url using memcpy without length checks, overflowing a stack buffer and enabling potential co...

CVE-2018-3905

An exploitable buffer overflow vulnerability exists in the camera "create" feature of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly extracts the "state" field from a user-controlled JSON payload, leading t...

CVE-2018-3879

CVE-2018-3879 describes a JSON injection in Samsung SmartThings Hub video-core’s credentials handler that leads to a SQL injection in the SQLite database. Affected device: Samsung SmartThings Hub STH-ETH-250 with firmware 0.20.17. Root cause: the video-core HTTP server parses user-controlled JSON...

CVE-2018-3925

An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process insecurely parses the AWSELB cookie while communicating with remote video-hos...

CVE-2018-3863

Summary: CVE-2018-3863 covers buffer-overflow vulnerabilities in Samsung SmartThings Hub video-core (STH-ETH-250) firmware 0.20.17. The /samsungWifiScan HTTP POST parses a user-controlled JSON payload and copies JSON-string values to 40-byte buffers using strcpy, without bounding, enabling stack ...

CVE-2018-3919

An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process insecurely extracts the fields from the "clips" table of its SQLite...

CVE-2018-3902

An exploitable buffer overflow vulnerability exists in the camera "replace" feature of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly extracts the URL field from a user-controlled JSON payload, leading to a...

CVE-2018-3919

CVE-2018-3919 affects Samsung SmartThings Hub STH-ETH-250 (firmware 0.20.17). The vulnerability is a stack-based buffer overflow in video-core HTTP server when retrieving fields from the SQLite clips table. The function copies data into per-field buffers (max 512 bytes) without length checks, all...

CVE-2018-3917

CVE-2018-3917 (and related TALOS/CNA entries) affects Samsung SmartThings Hub STH-ETH-250 firmware 0.20.17. The video-core HTTP server reads shard table fields (region among others) from SQLite and copies them with strcpy into fixed-size buffers, causing a stack-based buffer overflow when arbitra...

CVE-2018-3903

Samsung SmartThings Hub STH-ETH-250 (firmware 0.20.17) is affected by video-core HTTP server buffer overflows (CVE-2018-3903/3904). The vulnerability stems from copying user-controlled JSON fields (url or state) into a 512-byte stack buffer using memcpy, with the length derived from the source st...

CVE-2018-3917

On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" table of its SQLite database, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. The...

CVE-2018-3878

Multiple exploitable buffer overflow vulnerabilities exist in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buff...

CVE-2018-3925

CVE-2018-3925 affects Samsung SmartThings Hub STH-ETH-250, specifically the video-core HTTP server. The vulnerability arises from insecure parsing of the AWSELB cookie in remote video-host communications, copying the cookie value into a heap buffer without length checks, resulting in a heap-based...

PT-2018-16309 · Samsung · Samsung Smartthings Hub

Name of the Vulnerable Software and Affected Versions: Samsung SmartThings Hub STH-ETH-250 version 0.20.17 Description: The issue arises from the insecure extraction of fields from the "shard" table in the SQLite database by the video-core process, leading to a buffer overflow on the stack. This...

PT-2018-16261 · Samsung · Samsung Smartthings Hub

Name of the Vulnerable Software and Affected Versions: Samsung SmartThings Hub STH-ETH-250 version 0.20.17 Description: A stack-based buffer overflow issue exists in the samsungWifiScan callback notification of the video-core's HTTP server. The video-core process incorrectly handles answers from ...

PT-2018-16257 · Samsung · Samsung Smartthings Hub

Name of the Vulnerable Software and Affected Versions: Samsung SmartThings Hub STH-ETH-250 version 0.20.17 Description: The issue arises from the incorrect extraction of fields from a user-controlled JSON payload by the video-core process, leading to a buffer overflow on the stack. This can be...

PT-2018-16303 · Samsung · Samsung Smartthings Hub

Name of the Vulnerable Software and Affected Versions: Samsung SmartThings Hub STH-ETH-250 version 0.20.17 Description: An exploitable HTTP header injection issue exists in the remote servers of the Samsung SmartThings Hub. The hubCore process listens on port 39500 and relays any unauthenticated...

PT-2018-16273 · Samsung · Samsung Smartthings Hub

Name of the Vulnerable Software and Affected Versions: Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17 Description: A stack-based buffer overflow issue exists in the database 'find-by-cameraId' functionality of the video-core's HTTP server. The video-core process incorrectly handle...