CVEs-PoC/2017/CVE-2017-14445.md

CVE-2017-14445

Description

An exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation incorrectly handles the host parameter during a firmware update request, leading to a buffer overflow on a global section. An attacker can send an HTTP GET request to trigger this vulnerability.

POC

Reference

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0494
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0494

Github

No PoCs found on GitHub currently.