PT-2018-16299 · Samsung · Samsung Smartthings Hub

Published 2018-08-24 · Updated 2023-05-16 · CVE-2018-3907

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17

Description The issue arises from the incorrect handling of pipelined HTTP requests by the video-core process in the Samsung SmartThings Hub's HTTP server. This allows successive requests to overwrite the previously parsed HTTP method, specifically the 'on url' callback. An attacker can exploit this by sending a crafted HTTP request.

Recommendations For Firmware version 0.20.17, consider restricting access to the video-core's HTTP server until a patch is available. As a temporary workaround, avoid using pipelined HTTP requests to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

HTTP Request/Response Smuggling

Weakness Enumeration

CWE-444

Related Identifiers

CVE-2018-3907

Affected Products

Samsung Smartthings Hub

References · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0577 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-3907 · Security Note
• https://osv.dev/vulnerability/CVE-2018-3907 · Vendor Advisory