Samsung Smartthings Hub STH ETH 250 vulnerabilities, page 2

23 vulnerabilities

Known vulnerabilities in Samsung Smartthings Hub STH ETH 250, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.9CVE-2018-3867samsungsmartthings hub sth-eth-250+1
EPSS score
2.01%
An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly handles the answer received from a smart camera, leading to a buffer overflow on the stack. An attacker can send a series of HTTP requests to trigger this vulnerability.9.9CVE-2018-3925samsungsmartthings hub sth-eth-250+1
EPSS score
1.47%
An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process insecurely parses the AWSELB cookie while communicating with remote video-host servers, leading to a buffer overflow on the heap. An attacker able to impersonate the remote HTTP servers could trigger this vulnerability.9.9CVE-2018-3873samsungsmartthings hub sth-eth-250+1
EPSS score
1.80%
An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the destination buffer, which has a size of 128 bytes. An attacker can send an arbitrarily long "secretKey" value in order to exploit this vulnerability.