High severity · published Mar 21, 2019
CVE-2017-16255
An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012
8.1
CVSS
1.2%
EPSS
No
On KEV
Description
An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP request at At 0x9d014e84 the value for the cmd1 key is copied using strcpy to the buffer at $sp+0x280. This buffer is 16 bytes large.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
Insteon ·
Insteon Hub 2245-222 - Firmware version 1012 · source: vendor
HF
Hub Firmware · Insteon
1012 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-16255
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-16255
Exploit
https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483
More from Insteon
8.1
CVE-2017-16254
An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012
8.1
CVE-2017-16253
An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012 for the cc channel of Insteon Hub running firmware…