TI-2018-02802 Aliases CVE-2018-3832 GHSA-mv9v-5rx6-rmv3

Unrestricted file upload in Insteon

MEDIUM 42CWE-434Published 2018-08-23 · Updated 2024-09-17

Key facts

Attack vector: Network
Privileges required: Low
User interaction: Required
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-434.

Summary

An exploitable firmware update vulnerability exists in Insteon Hub running firmware version 1013. The HTTP server allows for uploading arbitrary MPFS binaries that could be modified to enable access to hidden resources which allow for uploading unsigned firmware images to the device. To trigger this vulnerability, an attacker can upload an MPFS binary via the '/mpfsupload' HTTP form and later on upload the firmware via a POST request to 'firmware.htm'.

Why it matters now

EPSS 0.01635 76th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Insteon	Insteon	Insteon Hub 2245-222 - Firmware version 1013	—	No fix listed	CNA

Insteon VendorInsteon Affected Insteon Hub 2245-222 - Firmware version 1013 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:o:insteon:hub_2245-222_firmware:1013:::::::*	1013	Vulnerable	Insteon
cpe:2.3:h:insteon:hub_2245-222:-:::::::*	not specified by NVD	Running on	Insteon

cpe:2.3:o:insteon:hub_2245-222_firmware:1013:*:*:*:*:*:*:* Versions 1013 Vulnerable ·Insteon
cpe:2.3:h:insteon:hub_2245-222:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Insteon

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2018-3832
2026-10-03 Alias added: GHSA-mv9v-5rx6-rmv3

References

Advisory 1

https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0511

TI-2017-10562 Memory corruption in Insteon Hub 2245-222 CVSS 3.0HIGH 8.8
TI-2017-12046 Buffer overflow in Insteon Hub 2245-222 CVSS 3.1HIGH 8.8
TI-2017-10560 Memory corruption in Insteon Hub 2245-222 CVSS 3.0HIGH 8.8
TI-2018-02803 An exploitable firmware downgrade vulnerability exists in Insteon Hub running firmware… CVSS 3.1HIGH 7.5
TI-2017-10550 An exploitable information leak vulnerability exists in Insteon Hub running firmware… CVSS 3.1MEDIUM 6.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences