An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c2c8 the value for the s_url key is copied using strcpy to the buffer at 0xa0001a0c. This buffer is 16 bytes large, sending anything longer will cause a buffer overflow. The destination can also be shifted by using an sn_speaker parameter between "0" and "3".
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: talos

Published: 2018-08-02T19:00:00

Updated: 2024-08-05T20:20:05.577Z

Reserved: 2017-10-31T00:00:00

Link: CVE-2017-16344

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2018-08-02T19:29:00.623

Modified: 2022-12-09T13:36:59.470

Link: CVE-2017-16344

cve-icon Redhat

No data.