Insteon
Page 2 of 2 — Insteon CVEs from a corpus of 115, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-16345 | Critical | 9.9 | 2018-08-02 | An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c318 the value for th… |
CVE-2017-16344 | Critical | 9.9 | 2018-08-02 | An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c2c8 the value for th… |
CVE-2017-16343 | Critical | 9.9 | 2018-08-02 | An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c284 the value for th… |
CVE-2017-16342 | Critical | 9.9 | 2018-08-02 | An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c254 the value for th… |
CVE-2017-16341 | Critical | 9.9 | 2018-08-02 | An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c224 the value for th… |
CVE-2017-16340 | Critical | 9.9 | 2018-08-02 | An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c0e8 the value for th… |
CVE-2017-16339 | Critical | 9.9 | 2018-08-02 | An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01bb1c the value for th… |
CVE-2017-16338 | Critical | 9.9 | 2018-08-02 | An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01bad0 the value for th… |
CVE-2017-14446 | Critical | 9.9 | 2018-08-02 | An exploitable stack-based buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation unsafely extracts… |
CVE-2017-14445 | Critical | 9.9 | 2018-08-02 | An exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation incorrectly handles the host p… |
CVE-2017-14444 | Critical | 9.9 | 2018-08-02 | An exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation incorrectly handles the URL pa… |
CVE-2018-12640 | Critical | 9.8 | 2018-06-23 | The webService binary on Insteon HD IP Camera White 2864-222 devices has a Buffer Overflow via a crafted pid, pwd, or usr key in a GET request on port 34100. |
CVE-2018-11560 | Critical | 9.8 | 2018-06-23 | The webService binary on Insteon HD IP Camera White 2864-222 devices has a stack-based Buffer Overflow leading to Control-Flow Hijacking via a crafted usr key… |
CVE-2017-5251 | High | 8.1 | 2018-02-22 | In version 1012 and prior of Insteon's Insteon Hub, the radio transmissions used for communication between the hub and connected devices are not encrypted. |
CVE-2017-5250 | Critical | 9.8 | 2018-02-22 | In version 1.9.7 and prior of Insteon's Insteon for Hub Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and… |