CVE-2017-16252

HIGH Year: 2017
CVSS v3 Score
8.5
High
CVSS v2 Score
5.5
Medium
Weakness Type
CWE-787
View all →

Vulnerability Description

Specially crafted commands sent through the PubNub service in Insteon Hub 2245-222 with firmware version 1012 can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability.At 0x9d014cc0 the value for the cmd key is copied using strcpy to the buffer at $sp+0x11c. This buffer is 20 bytes large, sending anything longer will cause a buffer overflow.

Related Vulnerabilities

CVE-2017-14446

HIGH
CVSS:8.5(High)

An exploitable stack-based buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation unsafely extracts parameters from the query string, leading...

CWE-7872017

CVE-2017-16253

HIGH
CVSS:8.5(High)

An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012 for the cc channel of Insteon Hub running firmware version 1012. Speciall...

CWE-7872017

CVE-2017-16254

HIGH
CVSS:8.5(High)

An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012. Specially crafted commands sent through the PubNub service can cause a s...

CWE-7872017

CVE-2022-28182

HIGH
CVSS:8.5(High)

NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), where an unauthorized attacker on the network can cause an out-of-bounds write throug...

CWE-7872022

CVE-2016-4331

HIGH
CVSS:8.6(High)

When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the bounds of the size leading to arbitrary code execut...

CWE-7872016

CVE-2016-8728

HIGH
CVSS:8.6(High)

An exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part of the MuPDF renderer. A specially crafted PDF file can cause a out of bounds write resulting in heap me...

CWE-7872016