CVE-2017-16254: insteon hub_firmware Out-of-bounds Write

Vulnerability summary

CVE-2017-16254 is a high (CVSS 8.5) Out-of-bounds Write vulnerability in insteon hub_firmware. EPSS estimates a 1.22% chance of exploitation in the next 30 days, higher than 68.3% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 21-03-2019
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP request at 0x9d014e4c the value for the flg key is copied using strcpy to the buffer at $sp+0x270. This buffer is 16 bytes large, sending anything longer will cause a buffer overflow.

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.