CVE-2017-14443: Infoleak
First published: Mon Sep 17 2018(Updated: )
An exploitable information leak vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation incorrectly checks the number of GET parameters supplied, leading to an arbitrarily controlled information leak on the whole device memory. An attacker can send an authenticated HTTP request to trigger this vulnerability.
Credit: talos-cna@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Insteon Hub 2245-222 Firmware | =1012 | |
| Insteon Hub 2245-222 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/tags
- agent/first-publish-date
- agent/event
- agent/description
- vendor/insteon
- canonical/insteon hub 2245-222 firmware
- version/insteon hub 2245-222 firmware/1012
- canonical/insteon hub 2245-222