CVE-2017-14447

published 2018-08-06

CVE-2017-14447: An exploitable buffer overflow vulnerability exists in the PubNub message handler for the 'ad' channel of Insteon Hub running firmware version 1012. Specially…

Priority P3 42 high 7.7 CVSS 3.0

AV N AC L PR L UI N S C C N I H A N

An exploitable buffer overflow vulnerability exists in the PubNub message handler for the 'ad' channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
insteon	hub_firmware	—	—
talos	insteon	—	—

CVSS provenance

nvd v3.0 7.7 HIGH CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

nvd v2.0 5.5 MEDIUM AV:N/AC:L/Au:S/C:N/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-119