CVE-2018-3865: Buffer Overflow
An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily long "cameraIp" value in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-3865?
The severity of CVE-2018-3865 is classified as high due to the potential for remote code execution through a buffer overflow.
How do I fix CVE-2018-3865?
To fix CVE-2018-3865, update the Samsung SmartThings Hub to a version that addresses the buffer overflow issue.
What products are affected by CVE-2018-3865?
CVE-2018-3865 affects the Samsung SmartThings Hub with firmware version 0.20.17.
Can CVE-2018-3865 be exploited remotely?
Yes, CVE-2018-3865 can be exploited remotely by an attacker through crafted HTTP requests.
What type of vulnerability is CVE-2018-3865?
CVE-2018-3865 is a buffer overflow vulnerability that occurs within the Samsung WifiScan handler.