8.5high
CVE-2017-16255
An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012.
Published 7 y ago · modified 4 mo ago · JSON
CVSS
8.5
v3.0 · CNA
CISA KEV
No
not known exploited
EPSS
1.2%
percentile 69%
Public exploits
0
none known
Summary
An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP request at At 0x9d014e84 the value for the cmd1 key is copied using strcpy to the buffer at $sp+0x280. This buffer is 16 bytes large.
Exploit prediction (EPSS)
1.22% probability of exploitation in the next 30 days, higher than 69% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.0 | 8.5 | CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H |
| NVD | 3.1 | 8.1 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H |
| CNA | 3.0 | 8.5 | CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H |
| NVD | 2.0 | 5.5 | AV:N/AC:L/Au:S/C:N/I:P/A:P |
Affected products
- n/a Insteon
Classification
- Weakness
- CWE-120 Buffer Copy without Checking Size of Input
References
- talosintelligence.com /vulnerability_reports/TALOS-2017-0483 · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2017-16255
- NVD: CVE-2017-16255
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.