Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 23/08/2018 Updated: 16/05/2023

CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8

CVSS v3 Base Score: 9.9 | Impact Score: 6 | Exploitability Score: 3.1

VMScore: 802

Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. The memcpy call overflows the destination buffer, which has a size of 512 bytes. An attacker can send an arbitrarily long "url" value in order to overwrite the saved-PC with 0x42424242.

Vulnerable Product	Search on Vulmon	Subscribe to Product
samsung sth-eth-250_firmware 0.20.17

CWE-787 https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0574 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-3903

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect