CVE-2018-3916: Buffer Overflow
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 136 bytes. An attacker can send an arbitrarily long 'directory' value in order to exploit this vulnerability. An attacker can send an HTTP request to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-3916?
CVE-2018-3916 has a high severity rating due to its potential for exploitation through a stack-based buffer overflow.
How do I fix CVE-2018-3916?
To fix CVE-2018-3916, update the Samsung SmartThings Hub to a firmware version that addresses this vulnerability.
What are the implications of CVE-2018-3916?
The implications of CVE-2018-3916 include the potential for remote code execution and unauthorized access through the exploited buffer overflow.
Which devices are affected by CVE-2018-3916?
CVE-2018-3916 specifically affects the Samsung SmartThings Hub STH-ETH-250 running firmware version 0.20.17.
Can CVE-2018-3916 be exploited remotely?
Yes, CVE-2018-3916 can be exploited remotely due to vulnerabilities in the video-core HTTP server.