Critical severity · published Aug 23, 2018
CVE-2018-3832
An exploitable firmware update vulnerability exists in Insteon Hub running firmware version 1013
9.0
CVSS
1.6%
EPSS
No
On KEV
Description
An exploitable firmware update vulnerability exists in Insteon Hub running firmware version 1013. The HTTP server allows for uploading arbitrary MPFS binaries that could be modified to enable access to hidden resources which allow for uploading unsigned firmware images to the device. To trigger this vulnerability, an attacker can upload an MPFS binary via the '/mpfsupload' HTTP form and later on upload the firmware via a POST request to 'firmware.htm'.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
H2
Hub 2245-222 Firmware · Insteon
1013 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-3832
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-3832
Third Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0511
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/144976
More from Hub 2245-222 Firmware
8.8
CVE-2017-16337
On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting…
8.8
CVE-2017-14455
On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received from the PubNub service can cause buffer overflows on a global section overwriting…
8.8
CVE-2017-14453
On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received from the PubNub service can cause buffer overflows on a global section overwriting…
7.5
CVE-2018-3833
An exploitable firmware downgrade vulnerability exists in Insteon Hub running firmware version 1013
6.5
CVE-2017-14443
An exploitable information leak vulnerability exists in Insteon Hub running firmware version 1012