VYPR
← All advisories
High severity8.1NVD Advisory· Published Aug 6, 2018· Updated Jun 17, 2026

CVE-2017-16252

CVE-2017-16252

Description

Specially crafted commands sent through the PubNub service in Insteon Hub 2245-222 with firmware version 1012 can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability.At 0x9d014cc0 the value for the cmd key is copied using strcpy to the buffer at $sp+0x11c. This buffer is 20 bytes large, sending anything longer will cause a buffer overflow.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Insteon/Hub Firmware
    cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*
  • Insteon/Hubllm-fuzzy
    Range: =1012
  • Talos/Insteonv5
    Range: Insteon Hub 2245-222 - Firmware version 1012

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.