CVE-2018-3895

State: Published
Severity: 9.9 Critical
Published: Aug 28, 2018
Updated: Sep 17, 2024
Reserved: Jan 2, 2018

Description

An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 Firmware version 0.20.17. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily long 'endTime' value in order to exploit this vulnerability. An attacker can send an HTTP request to trigger this vulnerability.

Scores

CVSS	Score	Vector	Source
3.0	9.9 Critical	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	talos

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
SamsungSamsung	Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17Affected

References

https://talosintelligence.com/vulnerability_reports/TALOS-2018-0570

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.