PT-2018-16303 · Samsung · Samsung Smartthings Hub

Published 2018-08-23 · Updated 2023-02-04 · CVE-2018-3911

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Samsung SmartThings Hub STH-ETH-250 version 0.20.17

Description An exploitable HTTP header injection issue exists in the remote servers of the Samsung SmartThings Hub. The hubCore process listens on port 39500 and relays any unauthenticated message to SmartThings' remote servers, which insecurely handle JSON messages. This leads to partially controlled requests generated toward the internal video-core process. An attacker can send an HTTP request to trigger this issue.

Recommendations For Samsung SmartThings Hub STH-ETH-250 version 0.20.17, consider restricting access to port 39500 to minimize the risk of exploitation. As a temporary workaround, avoid using the hubCore process until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Weakness Enumeration

CWE-113

Related Identifiers

CVE-2018-3911

Affected Products

Samsung Smartthings Hub

References · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0578 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-3911 · Security Note
• https://osv.dev/vulnerability/CVE-2018-3911 · Vendor Advisory