CVE-2018-3925: Buffer Overflow
An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process insecurely parses the AWSELB cookie while communicating with remote video-host servers, leading to a buffer overflow on the heap. An attacker able to impersonate the remote HTTP servers could trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-3925?
CVE-2018-3925 is considered a high severity vulnerability due to its potential for remote exploitation via buffer overflow.
How do I fix CVE-2018-3925?
To fix CVE-2018-3925, update your Samsung SmartThings Hub STH-ETH-250 devices to the latest firmware version that addresses this vulnerability.
What devices are affected by CVE-2018-3925?
CVE-2018-3925 affects the Samsung SmartThings Hub STH-ETH-250 devices running firmware version 0.20.17.
Can CVE-2018-3925 lead to remote code execution?
Yes, CVE-2018-3925 can potentially lead to remote code execution due to the buffer overflow in the affected video-core's HTTP server.
How is the AWSELB cookie related to CVE-2018-3925?
The vulnerability in CVE-2018-3925 arises from the insecure parsing of the AWSELB cookie during remote video-host communication.