Read the docs

Insteon

Records115All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical97CVSS 9.0–10.0
CVSS high17CVSS 7.0–8.9

Exploited now

Insteon records in CISA KEV

No Insteon vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records in Hub 2245-222 Firmware · all components

TI-2018-02802 CVE-2018-3832 · GHSA-mv9v-5rx6-rmv3

Unrestricted file upload in Insteon

Priority MEDIUM 42

An exploitable firmware update vulnerability exists in Insteon Hub running firmware version 1013.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.01635 Published 2018-08-23 No fix listed CWE-434
TI-2017-10562 CVE-2017-14455 · GHSA-36xm-4j44-qpm8

Memory corruption in Insteon Hub 2245-222

Priority MEDIUM 42

On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received from the PubNub service can cause buffer overflows on a global section overwriting arbitrary data.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01855 Published 2018-08-23 No fix listed CWE-119
TI-2017-12046 CVE-2017-16337 · GHSA-qvcq-9fpx-fqgm

Buffer overflow in Insteon Hub 2245-222

Priority MEDIUM 41

On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01692 Published 2018-08-23 No fix listed CWE-120
TI-2017-10560 CVE-2017-14453 · GHSA-mx44-hvmf-57mm

Memory corruption in Insteon Hub 2245-222

Priority MEDIUM 41

On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received from the PubNub service can cause buffer overflows on a global section overwriting arbitrary data.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01408 Published 2018-08-23 No fix listed CWE-119
Open these records in search →