CVE-2018-3864: Buffer Overflow
An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily long "password" value in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-3864?
CVE-2018-3864 is classified as a high severity vulnerability due to its potential for exploitation through a buffer overflow.
How do I fix CVE-2018-3864?
To mitigate CVE-2018-3864, update the Samsung SmartThings Hub STH-ETH-250 to the latest firmware version provided by Samsung.
What type of vulnerability is CVE-2018-3864?
CVE-2018-3864 is a buffer overflow vulnerability that occurs in the WifiScan handler of the Samsung SmartThings Hub.
What is affected by CVE-2018-3864?
CVE-2018-3864 affects the Samsung SmartThings Hub STH-ETH-250 running firmware version 0.20.17.
Can CVE-2018-3864 be exploited remotely?
Yes, CVE-2018-3864 can be exploited remotely as an attacker can send specially crafted requests to trigger the buffer overflow.