CVEs-PoC/2017/CVE-2017-14444.md

CVE-2017-14444

Description

An exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation incorrectly handles the URL parameter during a firmware update request, leading to a buffer overflow on a global section. An attacker can send an HTTP GET request to trigger this vulnerability.

POC

Reference

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0493
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0493

Github

No PoCs found on GitHub currently.