Buffer Overflow Vulnerability in Samsung SmartThings Hub Devices
CVE-2018-3925

8.5HIGH

Key Information:

Vendor

Samsung
Status
Smartthings Hub Sth-eth-250
Vendor
CVE Published:
23 August 2018

What is CVE-2018-3925?

A buffer overflow vulnerability has been identified in the video-core process of Samsung's SmartThings Hub STH-ETH-250 devices, specifically in the handling of HTTP communications with remote video-host servers. This vulnerability arises due to the insecure parsing of the AWSELB cookie, which can potentially be exploited by a malicious actor impersonating remote HTTP servers. If successfully executed, this could lead to a buffer overflow on the heap, allowing unauthorized access or manipulation of the device.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SmartThings Hub STH-ETH-250 Firmware version 0.20.17

References

https://www.talosintelligence.com/vulnerability_reports/T...
x_refsource_MISC

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.