High severity · published Aug 23, 2018
CVE-2018-3833
An exploitable firmware downgrade vulnerability exists in Insteon Hub running firmware version 1013
7.5
CVSS
1.1%
EPSS
No
On KEV
Description
An exploitable firmware downgrade vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgrade functionality, triggered via PubNub, retrieves signed firmware binaries using plain HTTP requests. The device doesn't check the firmware version that is going to be installed and thus allows for flashing older firmware images. To trigger this vulnerability, an attacker needs to impersonate the remote server 'cache.insteon.com' and serve any signed firmware image.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
H2
Hub 2245-222 Firmware · Insteon
1013 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-3833
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-3833
Exploit
https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0512
More from Hub 2245-222 Firmware
9.0
CVE-2018-3832
An exploitable firmware update vulnerability exists in Insteon Hub running firmware version 1013
8.8
CVE-2017-16337
On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting…
8.8
CVE-2017-14455
On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received from the PubNub service can cause buffer overflows on a global section overwriting…
8.8
CVE-2017-14453
On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received from the PubNub service can cause buffer overflows on a global section overwriting…
6.5
CVE-2017-14443
An exploitable information leak vulnerability exists in Insteon Hub running firmware version 1012