An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the destination buffer, which has a size of 32 bytes. An attacker can send an arbitrarily long "accessKey" value in order to exploit this vulnerability.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: talos

Published: 2018-09-21T14:00:00Z

Updated: 2024-09-17T00:50:47.364Z

Reserved: 2018-01-02T00:00:00

Link: CVE-2018-3874

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2018-09-21T14:29:00.380

Modified: 2023-04-26T18:54:05.307

Link: CVE-2018-3874

cve-icon Redhat

No data.