Back to Database
Status published
High
CVE-2017-14446
An exploitable stack-based buffer overflow vulnerability exists in Insteon Hub...
Vulnerability Description
An exploitable stack-based buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation unsafely extracts parameters from the query string, leading to a buffer overflow on the stack. An attacker can send an HTTP GET request to trigger this vulnerability.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-14446
Credits & Attribution
No credits recorded in the NVD database.
More from Insteon
View All →CVE-2018-3834
An exploitable permanent denial of service vulnerability exists in Insteon...
High
8.7
CVE-2018-3833
An exploitable firmware downgrade vulnerability exists in Insteon Hub running...
High
8.6
CVE-2018-3832
An exploitable firmware update vulnerability exists in Insteon Hub running...
Critical
9.9
CVE-2017-5251
In version 1012 and prior of Insteon's Insteon Hub, the...
High
8.1
CVE-2017-5250
In version 1.9.7 and prior of Insteon's Insteon for Hub...
Critical
9.8
Affected Vendor
Insteon
View all reports →Affected Software
Insteon
Vulnerable Versions:
Insteon Hub 2245-222 - Firmware version 1012
Timeline
Official Publish:
August 2nd, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.