Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
InsteonInsteon Hub Firmware

6 matches found

CVE
CVE•added 2019/03/21 5:29 p.m.•53 views

CVE-2017-16253

An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012 for the cc channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwrit...

8.5CVSS8.9AI score0.01129EPSS
CVE
CVE•added 2019/03/21 5:29 p.m.•51 views

CVE-2017-16255

An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP r...

8.5CVSS8.8AI score0.00922EPSS
CVE
CVE•added 2019/03/21 5:29 p.m.•48 views

CVE-2017-16254

An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP r...

8.5CVSS8.9AI score0.00922EPSS
CVE
CVE•added 2018/08/23 2:29 p.m.•42 views

CVE-2018-3833

An exploitable firmware downgrade vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgrade functionality, triggered via PubNub, retrieves signed firmware binaries using plain HTTP requests. The device doesn't check the firmware version that is going to be installed an...

8.6CVSS7.5AI score0.00499EPSS
CVE
CVE•added 2018/02/22 4:29 p.m.•38 views

CVE-2017-5251

In version 1012 and prior of Insteon's Insteon Hub, the radio transmissions used for communication between the hub and connected devices are not encrypted.

8.1CVSS8.1AI score0.0017EPSS
CVE
CVE•added 2018/08/02 7:29 p.m.•37 views

CVE-2018-3834

An exploitable permanent denial of service vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgrade functionality, triggered via PubNub, retrieves signed firmware binaries using plain HTTP requests. The device doesn't check the kind of firmware image that is going to ...

8.7CVSS7.3AI score0.00217EPSS