Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-3866 State: PUBLISHED Published: 2018-08-23T22:00:00Z Last Updated: 2024-09-16T17:18:45.490Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Products: Samsung Problem Types: Classic Buffer Overflow Description: An exploitable buffer overflow vulnerability exists in the samsungWifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. The strcpy at [8] overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily l
The strcpy at [8] overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily long 'callbackUrl' value in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0548
CVE ID: CVE-2018-3867 State: PUBLISHED Published: 2018-08-23T15:00:00Z Last Updated: 2024-09-17T03:22:26.234Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Products: SmartThings Hub STH-ETH-250 Problem Types: Classic Buffer Overflow Description: An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly handles the answer received from a smart camera, leading to a buffer overflow on the stack. An attacker can send a series of HTTP requests to trigger this vul
rt camera, leading to a buffer overflow on the stack. An attacker can send a series of HTTP requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0549
CVE ID: CVE-2018-3868 State: PUBLISHED Published: 2018-04-12T19:00:00Z Last Updated: 2024-09-17T04:25:00.865Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: Computerinsel Photoline Problem Types: Out of bounds write Description: A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0550
CVE ID: CVE-2018-3869 State: REJECTED Published: 2019-10-30T15:36:43 Last Updated: 2019-10-30T15:36:43 Description: No description available.
CVE ID: CVE-2018-3870 State: PUBLISHED Published: 2018-07-19T19:00:00Z Last Updated: 2024-09-16T20:17:52.356Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: ACD Systems Products: Canvas Draw Problem Types: CWE-787 Description: An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution. A different vulnerability than CVE-2018-3871. Additional Analyst Notes: - CVE Program Container: References: - https://t
A different vulnerability than CVE-2018-3871. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0552
CVE ID: CVE-2018-3871 State: PUBLISHED Published: 2018-07-19T19:00:00Z Last Updated: 2024-09-17T01:40:35.132Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: ACD Systems Products: Canvas Draw Problem Types: CWE-787 Description: An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution. A different vulnerability than CVE-2018-3870. Additional Analyst Notes: - CVE Program Container: References: - https://t
A different vulnerability than CVE-2018-3870. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0553
CVE ID: CVE-2018-3872 State: PUBLISHED Published: 2018-08-23T22:00:00Z Last Updated: 2024-09-16T20:47:01.793Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Products: Samsung Problem Types: Classic Buffer Overflow Description: An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly extracts the videoHostUrl field from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program
n the stack. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0554
CVE ID: CVE-2018-3873 State: PUBLISHED Published: 2018-09-21T14:00:00Z Last Updated: 2024-09-16T20:12:23.206Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Products: SmartThings Hub STH-ETH-250 Problem Types: Classic Buffer Overflow Description: An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the destination buffer, which has a size of 128 bytes. An attacker can send an arbitrarily long "secretKey" value in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: Reference
g "secretKey" value in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0555
CVE ID: CVE-2018-3874 State: PUBLISHED Published: 2018-09-21T14:00:00Z Last Updated: 2024-09-17T00:50:47.364Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Products: SmartThings Hub STH-ETH-250 Problem Types: Classic Buffer Overflow Description: An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the destination buffer, which has a size of 32 bytes. An attacker can send an arbitrarily long "accessKey" value in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References
"accessKey" value in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0555
CVE ID: CVE-2018-3875 State: PUBLISHED Published: 2018-09-10T20:00:00Z Last Updated: 2024-09-17T01:06:40.362Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Products: SmartThings Hub STH-ETH-250 Problem Types: Classic Buffer Overflow Description: An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. The strncpy overflows the destination buffer, which has a size of 2,000 bytes. An attacker can send an ar
on the stack. The strncpy overflows the destination buffer, which has a size of 2,000 bytes. An attacker can send an arbitrarily long "sessionToken" value in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0555
CVE ID: CVE-2018-3876 State: PUBLISHED Published: 2018-09-21T14:00:00Z Last Updated: 2024-09-16T16:48:50.380Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Products: SmartThings Hub STH-ETH-250 Problem Types: Classic Buffer Overflow Description: An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the destination buffer, which has a size of 64 bytes. An attacker can send an arbitrarily long "bucket" value in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: -
"bucket" value in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0555
CVE ID: CVE-2018-3877 State: PUBLISHED Published: 2018-09-21T14:00:00Z Last Updated: 2024-09-16T17:08:09.156Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Products: SmartThings Hub STH-ETH-250 Problem Types: Classic Buffer Overflow Description: An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the destination buffer, which has a size of 160 bytes. An attacker can send an arbitrarily long "directory" value in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: Reference
g "directory" value in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0555
CVE ID: CVE-2018-3878 State: PUBLISHED Published: 2018-08-23T15:00:00Z Last Updated: 2024-09-17T03:43:10.909Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Products: SmartThings Hub STH-ETH-250 Problem Types: Buffer copy without checking size Description: Multiple exploitable buffer overflow vulnerabilities exist in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. A strncpy overflows the destination buffer, which has a size of 16 bytes. A
, leading to a buffer overflow on the stack. A strncpy overflows the destination buffer, which has a size of 16 bytes. An attacker can send an arbitrarily long "region" value in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0555
CVE ID: CVE-2018-3879 State: PUBLISHED Published: 2018-08-23T15:00:00Z Last Updated: 2024-09-17T02:06:37.998Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Products: SmartThings Hub STH-ETH-250 Problem Types: Parsing SQL Injection Description: An exploitable JSON injection vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly parses the user-controlled JSON payload, leading to a JSON injection which in turn leads to a SQL injection in the video-core database. An attacker can send a series of HTTP requests to trigger t
in turn leads to a SQL injection in the video-core database. An attacker can send a series of HTTP requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0556
CVE ID: CVE-2018-3880 State: PUBLISHED Published: 2018-08-23T22:00:00Z Last Updated: 2024-09-17T01:00:52.006Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Products: Samsung Problem Types: Classic Buffer Overflow Description: An exploitable stack-based buffer overflow vulnerability exists in the database 'find-by-cameraId' functionality of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly handles existing records inside its SQLite database, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes:
fer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0557
CVE ID: CVE-2018-3881 State: PUBLISHED Published: 2018-08-01T20:00:00Z Last Updated: 2024-09-16T19:09:23.721Z Severity: CRITICAL (CVSS 9.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H) Vendors: FocalScope Products: Focalscope Problem Types: Improper Restriction of XML External Entity Reference Description: An exploitable unauthenticated XML external injection vulnerability was identified in FocalScope v2416. A unauthenticated attacker could submit a specially crafted web request to FocalScope's server that could cause an XXE, and potentially result in data compromise. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALO
ional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0559
CVE ID: CVE-2018-3882 State: PUBLISHED Published: 2018-09-12T14:00:00 Last Updated: 2024-08-05T04:57:24.412Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web requests can cause SQL injections resulting in data compromise. The searchfield parameter can be used to perform an SQL injection attack. An attacker can use a browser to trigger these vulnerabilities, and no special tools are required. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerabi
s are required. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0560
CVE ID: CVE-2018-3883 State: PUBLISHED Published: 2018-09-12T14:00:00Z Last Updated: 2024-09-17T03:43:30.337Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Talos Products: ERPNext Problem Types: SQL injection Description: An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web requests can cause SQL injections resulting in data compromise. The employee and sort_order parameter can be used to perform an SQL injection attack. An attacker can use a browser to trigger these vulnerabilities, and no special tools are required. Additional Analyst Notes: - CVE Program Container: References: - https://ta
bilities, and no special tools are required. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0560
CVE ID: CVE-2018-3884 State: PUBLISHED Published: 2018-09-12T14:00:00Z Last Updated: 2024-09-16T21:02:27.961Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Talos Products: ERPNext Problem Types: SQL injection Description: An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web requests can cause SQL injections resulting in data compromise. The sort_by and start parameter can be used to perform an SQL injection attack. An attacker can use a browser to trigger these vulnerabilities, and no special tools are required. Additional Analyst Notes: - CVE Program Container: References: - https://talosint
es, and no special tools are required. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0560
CVE ID: CVE-2018-3885 State: PUBLISHED Published: 2018-09-12T14:00:00Z Last Updated: 2024-09-16T22:20:49.348Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Talos Products: ERPNext Problem Types: SQL injection Description: An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web requests can cause SQL injections resulting in data compromise. The order_by parameter can be used to perform an SQL injection attack. An attacker can use a browser to trigger these vulnerabilities, and no special tools are required. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence
o special tools are required. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0560
CVE ID: CVE-2018-3886 State: PUBLISHED Published: 2018-04-11T20:00:00Z Last Updated: 2024-09-16T23:20:21.077Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: Computerinsel Photoline Problem Types: Out of bounds Write Description: A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vuln
gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0561
CVE ID: CVE-2018-3887 State: PUBLISHED Published: 2018-04-11T20:00:00Z Last Updated: 2024-09-16T17:58:29.770Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: Computerinsel Photoline Problem Types: Out-of-bounds write Description: A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vuln
gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0562
CVE ID: CVE-2018-3888 State: PUBLISHED Published: 2018-04-11T20:00:00Z Last Updated: 2024-09-16T17:48:05.089Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: Computerinsel Photoline Problem Types: Out of bounds write Description: A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vuln
gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0563
CVE ID: CVE-2018-3889 State: PUBLISHED Published: 2018-04-12T19:00:00Z Last Updated: 2024-09-16T17:28:04.613Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: Computerinsel Photoline Problem Types: Out of bounds write Description: A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0564
CVE ID: CVE-2018-3890 State: PUBLISHED Published: 2018-11-02T17:00:00 Last Updated: 2024-08-05T04:57:24.504Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: unknown Products: Yi Technology Problem Types: command injection Description: An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted file can cause a logic flaw and command injection, resulting in code execution. An attacker can insert an SD card to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0565
CVE ID: CVE-2018-3891 State: PUBLISHED Published: 2018-11-02T17:00:00 Last Updated: 2024-08-05T04:57:24.455Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: unknown Products: Yi Technology Problem Types: Stack-based Buffer Overflow Description: An exploitable firmware downgrade vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted file can cause a logic flaw, resulting in a firmware downgrade. An attacker can insert an SD card to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0566
CVE ID: CVE-2018-3892 State: PUBLISHED Published: 2018-11-02T17:00:00 Last Updated: 2024-08-05T04:57:24.125Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: unknown Products: Yi Technology Problem Types: Stack-based Buffer Overflow Description: An exploitable firmware downgrade vulnerability exists in the time syncing functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted packet can cause a buffer overflow, resulting in code execution. An attacker can intercept and alter network traffic to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-20
l Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0567
CVE ID: CVE-2018-3893 State: PUBLISHED Published: 2018-08-27T15:00:00 Last Updated: 2024-08-05T04:57:24.128Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://tal
HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0570
CVE ID: CVE-2018-3894 State: PUBLISHED Published: 2018-09-21T15:00:00Z Last Updated: 2024-09-17T01:16:33.067Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Products: SmartThings Hub STH-ETH-250 Problem Types: Classic Buffer Overflow Description: An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily long "startTime" value in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Containe