High severity8.5NVD Advisory· Published Aug 23, 2018· Updated Jun 17, 2026
CVE-2017-14455
CVE-2017-14455
Description
On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received from the PubNub service can cause buffer overflows on a global section overwriting arbitrary data. An attacker should impersonate PubNub and answer an HTTPS GET request to trigger this vulnerability. A strcpy overflows the buffer insteon_pubnub.channel_ak, which has a size of 16 bytes. An attacker can send an arbitrarily long "ak" parameter in order to exploit this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:insteon:hub_2245-222_firmware:1012:*:*:*:*:*:*:*
- Range: = 1012
Patches
Vulnerability mechanics
References
2- exchange.xforce.ibmcloud.com/vulnerabilities/144975nvdThird Party Advisory
- www.talosintelligence.com/vulnerability_reports/TALOS-2017-0502nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.