CVE-2017-14443

An exploitable information leak vulnerability exists in Insteon Hub running firmware version 1012

Critical · published September 17, 2018

CVSS v3.0
9.6
EPSS
2%
Percentile
77.9
In the wild
Unconfirmed
What it is

An exploitable information leak vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation incorrectly checks the number of GET parameters supplied, leading to an arbitrarily controlled information leak on the whole device memory. An attacker can send an authenticated HTTP request to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
9.6 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01767 · 77.9th percentile
Published
2018-09-17T17:00Z
EPSS history
Timeline
  • 17 SEP 17:00Z
    An exploitable information leak vulnerability exists in Insteon Hub running firmware version 1012
    cvelistv5