Insteon Hub vulnerabilities

CVE-2017-16274 [CRITICAL] CWE-121 CVE-2017-16274: Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger t

CVE-2017-16319 [CRITICAL] CWE-121 CVE-2017-16319: Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger t

CVE-2014-0177 [MEDIUM] CWE-377 Hub Package Arbitrary File Overwrite Hub Package Arbitrary File Overwrite The `am` function in `lib/hub/commands.rb` in hub before 1.12.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary patch file.