CVE-2017-14445medium

CVE-2017-14445: medium-severity vulnerability in Insteon

Published · Updated

Follow this CVE+ Monitor Insteon

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.4epss 1.1%
An exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation incorrectly handles the host parameter during a firmware update request, leading to a buffer overflow on a global section. An attacker can send an HTTP GET request to trigger this vulnerability.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Affected products
Insteon · Insteon
Related CVEs — Insteon

In the same product, most dangerous first.

CVE-2017-16348HIGHCVE-2017-16348EPSS 1.7%CVE-2018-3832CRITICALCVE-2018-3832EPSS 1.6%CVE-2017-14444HIGHCVE-2017-14444EPSS 1.4%CVE-2017-16344HIGHCVE-2017-16344EPSS 1.4%CVE-2017-16345HIGHCVE-2017-16345EPSS 1.4%CVE-2017-16346HIGHCVE-2017-16346EPSS 1.4%