Vulnerabilidades em Insteon
106 resultadosAnálise Vexday
Com 106 CVEs catalogadas, o histórico da Insteon apresenta um perfil de risco atualmente contido: nenhuma vulnerabilidade consta no catálogo CISA KEV, taxa abaixo da média geral, e não há registros de provas de conceito públicas, o que reduz a superfície de exploração imediata. O tipo de falha mais frequente é CWE-121 (stack-based buffer overflow), categoria que historicamente possibilita execução de código arbitrário e merece atenção em revisões de firmware e software embarcado. A CVE mais crítica no radar atual, CVE-2017-14455, apresenta EPSS de 0,0188, indicando probabilidade de exploração ativa relativamente baixa no curto prazo. A ausência de novas CVEs nos últimos 90 dias sugere baixa atividade recente de pesquisa ou divulgação, mas não elimina a necessidade de monitoramento contínuo dado o perfil de falhas de memória predominante.
CVE-2017-14455HIGHOn Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received from the PubNub service can cause buffer overEPSS 1.9%CVE-2017-16348HIGHAn exploitable denial of service vulnerability exists in Insteon Hub running firmware version 1012. Leftover demo functionality allows for aEPSS 1.7%CVE-2017-16337HIGHOn Insteon Hub 2245-222 devices with firmware version 1012, specially crafted commands sent through the PubNub service can cause a stack-basEPSS 1.7%CVE-2018-3832CRITICALAn exploitable firmware update vulnerability exists in Insteon Hub running firmware version 1013. The HTTP server allows for uploading arbitEPSS 1.7%CVE-2017-14444HIGHAn exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation incorrectlyEPSS 1.4%CVE-2017-14453HIGHOn Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received from the PubNub service can cause buffer overEPSS 1.4%CVE-2017-16344HIGHAn attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c2EPSS 1.4%CVE-2017-16346HIGHAn attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c3EPSS 1.4%CVE-2017-16345HIGHAn attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c3EPSS 1.4%CVE-2017-16347HIGHAn attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01e7EPSS 1.4%CVE-2017-16341HIGHAn attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c2EPSS 1.4%CVE-2017-16339HIGHAn attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01bbEPSS 1.4%CVE-2017-16338HIGHAn attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01baEPSS 1.4%CVE-2017-16340HIGHAn attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c0EPSS 1.4%CVE-2017-16342HIGHAn attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c2EPSS 1.4%CVE-2017-16343HIGHAn attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c2EPSS 1.4%CVE-2017-14446HIGHAn exploitable stack-based buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementationEPSS 1.3%CVE-2017-14452HIGHAn exploitable buffer overflow vulnerability exists in the PubNub message handler for the "control" channel of Insteon Hub running firmware EPSS 1.3%CVE-2017-16349MEDIUMAn exploitable XML external entity vulnerability exists in the reporting functionality of SAP BPC. A specially crafted XML request can causeEPSS 1.2%CVE-2018-3833HIGHAn exploitable firmware downgrade vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgrade functionality, triEPSS 1.1%