What is the severity of CVE-2018-3909?

CVE-2018-3909 is rated as high severity due to the risk of exploitation through HTTP request manipulation.

How do I fix CVE-2018-3909?

To fix CVE-2018-3909, update the Samsung SmartThings Hub to a firmware version higher than 0.20.17.

What systems are affected by CVE-2018-3909?

CVE-2018-3909 affects the Samsung SmartThings Hub model STH-ETH-250 running firmware version 0.20.17.

What type of vulnerability is CVE-2018-3909?

CVE-2018-3909 is a REST parser vulnerability in the video-core HTTP server that can lead to improper request handling.

Can CVE-2018-3909 be exploited remotely?

Yes, CVE-2018-3909 can be exploited remotely through crafted HTTP requests sent to the vulnerable SmartThings Hub.

Vulnerability/
CVE-2018-3909

critical

9.1

CWE

444

24/8/2018

17/9/2024

CVE-2018-3909

First published: Fri Aug 24 2018(Updated: )

An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly handles pipelined HTTP requests, which allows successive requests to overwrite the previously parsed HTTP method, 'onmessagecomplete' callback. An attacker can send an HTTP request to trigger this vulnerability.

Credit: talos-cna@cisco.com

Affected Software	Affected Version	How to fix
Samsung Sth-eth-250 Firmware	=0.20.17
Samsung Sth-eth-250

Never miss a vulnerability like this again

Reference Links

https://talosintelligence.com/vulnerability_reports/TALOS-2018-0577

Frequently Asked Questions

What is the severity of CVE-2018-3909?
CVE-2018-3909 is rated as high severity due to the risk of exploitation through HTTP request manipulation.
How do I fix CVE-2018-3909?
To fix CVE-2018-3909, update the Samsung SmartThings Hub to a firmware version higher than 0.20.17.
What systems are affected by CVE-2018-3909?
CVE-2018-3909 affects the Samsung SmartThings Hub model STH-ETH-250 running firmware version 0.20.17.
What type of vulnerability is CVE-2018-3909?
CVE-2018-3909 is a REST parser vulnerability in the video-core HTTP server that can lead to improper request handling.
Can CVE-2018-3909 be exploited remotely?
Yes, CVE-2018-3909 can be exploited remotely through crafted HTTP requests sent to the vulnerable SmartThings Hub.

collector/nvd-index
agent/type
agent/softwarecombine
agent/severity
agent/weakness
agent/references
agent/author
agent/tags
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
agent/event
agent/source
vendor/samsung
canonical/samsung sth-eth-250 firmware
version/samsung sth-eth-250 firmware/0.20.17
canonical/samsung sth-eth-250

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2018-3909?
CVE-2018-3909 is rated as high severity due to the risk of exploitation through HTTP request manipulation.
How do I fix CVE-2018-3909?
To fix CVE-2018-3909, update the Samsung SmartThings Hub to a firmware version higher than 0.20.17.
What systems are affected by CVE-2018-3909?
CVE-2018-3909 affects the Samsung SmartThings Hub model STH-ETH-250 running firmware version 0.20.17.
What type of vulnerability is CVE-2018-3909?
CVE-2018-3909 is a REST parser vulnerability in the video-core HTTP server that can lead to improper request handling.
Can CVE-2018-3909 be exploited remotely?
Yes, CVE-2018-3909 can be exploited remotely through crafted HTTP requests sent to the vulnerable SmartThings Hub.