Summaryinfo

A vulnerability was found in Samsung SmartThings Hub STH-ETH-250 0.20.17. It has been classified as critical. The impacted element is an unknown function of the component Video-Core HTTP Server. Performing a manipulation results in memory corruption. This vulnerability is known as CVE-2018-3915. Attacking locally is a requirement. No exploit is available. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Detailsinfo

A vulnerability was found in Samsung SmartThings Hub STH-ETH-250 0.20.17 (Router Operating System). It has been classified as critical. This affects an unknown code block of the component Video-Core HTTP Server. The manipulation with an unknown input leads to a memory corruption vulnerability. CWE is classifying the issue as CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 64 bytes. An attacker can send an arbitrarily long "bucket" value in order to exploit this vulnerability.

The bug was discovered 07/26/2018. The weakness was published 09/21/2018 (Website). It is possible to read the advisory at talosintelligence.com. This vulnerability is uniquely identified as CVE-2018-3915 since 01/01/2018. The exploitability is told to be easy. Attacking locally is a requirement. No form of authentication is needed for exploitation. The technical details are unknown and an exploit is not publicly available.

The vulnerability was handled as a non-public zero-day exploit for at least 57 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Similar entries are available at VDB-123347, VDB-124393 and VDB-124394. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Router Operating System

Vendor

• Samsung

Name

• SmartThings Hub STH-ETH-250

Version

• 0.20.17

License

• open-source

Website

• Vendor: https://www.samsung.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion