Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2017-16253 Details

Description

An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012 for the cc channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP request At 0x9d014dd8 the value for the id key is copied using strcpy to the buffer at $sp+0x290. This buffer is 32 bytes large, sending anything longer will cause a buffer overflow.

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483 CVEExploitThird Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483 [email protected]ExploitThird Party Advisory

Weakness Enumeration

CWE-IDCWE NameSource
CWE-787Out-of-bounds Write[email protected]

Affected Products

ProductVersions
insteon hub firmware
1012

CPE

  • cpe:2.3:o:insteon:hub_firmware:1012:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
insteon hub
2245-222 -

CPE

  • cpe:2.3:h:insteon:hub:2245-222:-:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

6 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2017-16253
NVD Published Date:
Mar 21, 2019
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2017-16253 Details - Not Deferred