CVE-2017-14447

An exploitable buffer overflow vulnerability exists in the PubNub message handler for the 'ad' channel of Insteon Hub running firmware version 1012

High · published August 6, 2018

CVSS v3.0
8.5
EPSS
1%
Percentile
64.6
In the wild
Unconfirmed
What it is

An exploitable buffer overflow vulnerability exists in the PubNub message handler for the 'ad' channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
8.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01081 · 64.6th percentile
Published
2018-08-06T17:00Z
EPSS history
Timeline
  • 06 AUG 17:00Z
    An exploitable buffer overflow vulnerability exists in the PubNub message handler for the 'ad' channel of Insteon Hub running firmware version 1012
    cvelistv5