PT-2018-6263 · Insteon · Insteon Hub

Published 2018-08-06 · Updated 2022-12-09 · CVE-2017-16252

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Insteon Hub 2245-222 version 1012

Description: The issue arises from specially crafted commands sent through the PubNub service, which can cause a stack-based buffer overflow, overwriting arbitrary data. This is triggered by sending an authenticated HTTP request. Specifically, at memory address 0x9d014cc0, the value for the cmd key is copied using strcpy to a buffer located at $sp+0x11c, which is 20 bytes large. Sending data longer than this buffer size will cause a buffer overflow.

Recommendations: For Insteon Hub 2245-222 version 1012, as a temporary workaround, consider restricting access to the PubNub service until a patch is available. Avoid using the cmd key in authenticated HTTP requests to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2017-16252

Affected Products

Insteon Hub

References · 4

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-16252 · Security Note
• https://osv.dev/vulnerability/CVE-2017-16252 · Vendor Advisory
• https://t.me/cvenotify/39526 · Telegram Post