An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the destination buffer, which has a size of 32 bytes. An attacker can send an arbitrarily long "accessKey" value in order to exploit this vulnerability.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HSamsung Sth Eth 250
HWSamsungwszystkie wersjeSamsung Sth Eth 250 Firmware
OSSamsung0.20.17
Powiązane podatności
An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of ...
An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of ...
An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of ...
An exploitable buffer overflow vulnerability exists in the camera 'update' feature of video-core's HTTP server...
An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings ...