Unrated severityNVD Advisory· Published Aug 28, 2018· Updated Sep 17, 2024
CVE-2018-3895
CVE-2018-3895
Description
An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 Firmware version 0.20.17. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily long 'endTime' value in order to exploit this vulnerability. An attacker can send an HTTP request to trigger this vulnerability.
Affected products
1- Range: Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- talosintelligence.com/vulnerability_reports/TALOS-2018-0570mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.