An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware ve…

Published 8 y ago 2018-08-24 · modified 4 mo ago 2026-06-17 · JSON

CVSS

9.1

v3.0 · CNA

CISA KEV

not known exploited

EPSS

1.3%

percentile 70%

Public exploits

none known

An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly handles pipelined HTTP requests, which allows successive requests to overwrite the previously parsed HTTP method, 'onmessagecomplete' callback. An attacker can send an HTTP request to trigger this vulnerability.

Exploit prediction (EPSS)

1.25% probability of exploitation in the next 30 days, higher than 70% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CNA	3.0	9.1	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H`
NVD	3.1	8.6	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N`
CNA	3.0	9.1	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H`
NVD	2.0	6.4	`AV:N/AC:L/Au:N/C:N/I:P/A:P`

Affected products

Talos Samsung

Classification

Weakness

CWE-444 Inconsistent Interpretation of HTTP Requests

References

talosintelligence.com /vulnerability_reports/TALOS-2018-0577 · x_refsource_MISC, x_transferred

Sources

CVE List: CVE-2018-3909
NVD: CVE-2018-3909

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.