CVE-2018-3895

CWE-120 — Classic Buffer Overflow CWE-119 — Buffer Overflow3 documents3 sources

Severity

8.8HIGH

EPSS

0.4%

top 40.46%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Samsung Samsung Samsung Sth-eth-250 Firmware

Timeline

PublishedAug 28

Latest updateMay 13

Description

An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 Firmware version 0.20.17. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily long 'endTime' value in order to exploit this vulnerability. An attacker can send an HTTP request to trigger this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶NVDsamsung/sth-eth-250_firmware0.20.17

▶CVEListV5samsung/samsungSamsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17

🔴Vulnerability Details

GHSA

GHSA-624g-xqw5-ccp4: An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-↗2022-05-13

▶

CVEList

CVE-2018-3895: An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-↗2018-08-28

▶