Insteon Hub 2245-222 up to 1012 PubNub Message HTTP Request memory corruption

Summaryinfo

A vulnerability has been found in Insteon Hub 2245-222 up to 1012 and classified as critical. This impacts an unknown function of the component PubNub Message Handler. The manipulation as part of HTTP Request leads to memory corruption. This vulnerability is referenced as CVE-2017-16253. Remote exploitation of the attack is possible. No exploit is available.

Detailsinfo

A vulnerability was found in Insteon Hub 2245-222 up to 1012 (Network Management Software) and classified as critical. This issue affects an unknown part of the component PubNub Message Handler. The manipulation as part of a HTTP Request leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012 for the cc channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP request At 0x9d014dd8 the value for the id key is copied using strcpy to the buffer at $sp+0x290. This buffer is 32 bytes large, sending anything longer will cause a buffer overflow.

The bug was discovered 06/19/2018. The weakness was published 03/21/2019. The identification of this vulnerability is CVE-2017-16253 since 10/31/2017. The attack may be initiated remotely. A simple authentication is necessary for exploitation. The technical details are unknown and an exploit is not publicly available.

The vulnerability was handled as a non-public zero-day exploit for at least 275 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Similar entries are available at VDB-131857 and VDB-131856. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Network Management Software

Vendor

• Insteon

Name

• Hub 2245-222

Version

• 1012

License

• commercial

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion