Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r64g-3xg5-7gm7

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.9

Описание

An exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation incorrectly handles the host parameter during a firmware update request, leading to a buffer overflow on a global section. An attacker can send an HTTP GET request to trigger this vulnerability.

An exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation incorrectly handles the host parameter during a firmware update request, leading to a buffer overflow on a global section. An attacker can send an HTTP GET request to trigger this vulnerability.

EPSS

Процентиль: 59%
0.00383
Низкий

9.9 Critical

CVSS3

Дефекты

CWE-119
CWE-120

Связанные уязвимости

CVSS3: 9.9
nvd
больше 7 лет назад

An exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation incorrectly handles the host parameter during a firmware update request, leading to a buffer overflow on a global section. An attacker can send an HTTP GET request to trigger this vulnerability.

EPSS

Процентиль: 59%
0.00383
Низкий

9.9 Critical

CVSS3

Дефекты

CWE-119
CWE-120