CVE-2018-3866: Buffer Overflow
An exploitable buffer overflow vulnerability exists in the samsungWifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. The strcpy at [8] overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily long 'callbackUrl' value in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-3866?
CVE-2018-3866 has a high severity level due to its potential for remote code execution through a buffer overflow.
How do I fix CVE-2018-3866?
To mitigate CVE-2018-3866, upgrade the Samsung SmartThings Hub STH-ETH-250 firmware to a version above 0.20.17.
What systems are affected by CVE-2018-3866?
CVE-2018-3866 affects the Samsung SmartThings Hub STH-ETH-250 running firmware version 0.20.17.
Can CVE-2018-3866 be exploited remotely?
Yes, CVE-2018-3866 can be exploited remotely due to vulnerabilities in the video-core HTTP server.
What type of vulnerability is CVE-2018-3866?
CVE-2018-3866 is a buffer overflow vulnerability that can lead to arbitrary code execution.