Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

40 records

Vendor: Samsung Component: Sth-eth-250 Firmware Clear all filters
TI-2018-02883 CVE-2018-3915 · GHSA-fwv9-q69x-v7q2

Out-of-bounds write in Samsung SmartThings Hub STH-ETH-250

Priority LOW 36

An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00397 Published 2018-09-21 No fix listed CWE-787
TI-2018-02882 CVE-2018-3914 · GHSA-7373-q85p-xf23

Out-of-bounds write in Samsung SmartThings Hub STH-ETH-250

Priority LOW 34

An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00423 Published 2018-09-21 No fix listed CWE-787
TI-2018-02874 CVE-2018-3906 · GHSA-q22m-9gr4-fmwj

Out-of-bounds write in Samsung SmartThings Hub STH-ETH-250

Priority LOW 36

An exploitable stack-based buffer overflow vulnerability exists in the retrieval of a database field in video-core's HTTP server of Samsung SmartThings Hub.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.0041 Published 2018-09-21 No fix listed CWE-787
TI-2018-02863 CVE-2018-3894 · GHSA-8ppx-64m7-wrpx

Buffer overflow in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 42

An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01804 Published 2018-09-21 No fix listed CWE-120
TI-2018-02846 CVE-2018-3877 · GHSA-g89f-v8gf-6v8f

Memory corruption in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 46

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01804 Published 2018-09-21 No fix listed CWE-119
TI-2018-02845 CVE-2018-3876 · GHSA-xr84-7wwf-c8rq

Buffer overflow in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 42

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01871 Published 2018-09-21 No fix listed CWE-120
TI-2018-02843 CVE-2018-3874 · GHSA-h4q5-v8j4-8ph5

Memory corruption in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 46

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01802 Published 2018-09-21 No fix listed CWE-119
TI-2018-02842 CVE-2018-3873 · GHSA-223p-pjp4-9vv5

Memory corruption in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 46

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01804 Published 2018-09-21 No fix listed CWE-119
TI-2018-02835 CVE-2018-3865 · GHSA-6hjr-885q-f58r

Buffer overflow in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 42

An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01827 Published 2018-09-20 No fix listed CWE-120
TI-2018-02834 CVE-2018-3864 · GHSA-w75f-gw3f-7vf9

Buffer overflow in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 42

An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01804 Published 2018-09-20 No fix listed CWE-120
TI-2018-02844 CVE-2018-3875 · GHSA-98wj-w9r7-fcxv

Memory corruption in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 46

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01534 Published 2018-09-10 No fix listed CWE-119
TI-2018-02866 CVE-2018-3897 · GHSA-pxxh-6r9f-prx5

Buffer overflow in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 41

An exploitable buffer overflow vulnerabilities exist in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub with Firmware version 0.20.17.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01534 Published 2018-09-10 No fix listed CWE-120
TI-2018-02865 CVE-2018-3896 · GHSA-cqv5-c932-gfp5

Buffer overflow in Samsung SmartThings Hub STH-ETH-250

Priority MEDIUM 41

An exploitable buffer overflow vulnerabilities exist in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub with Firmware version 0.20.17.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01534 Published 2018-09-10 No fix listed CWE-120
TI-2018-02884 CVE-2018-3916 · GHSA-cwrm-ghmj-hwr3

Out-of-bounds write in Samsung

Priority LOW 34

An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00389 Published 2018-08-28 No fix listed CWE-787
TI-2018-02864 CVE-2018-3895 · GHSA-624g-xqw5-ccp4

Buffer overflow in Samsung

Priority MEDIUM 42

An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 Firmware version 0.20.17.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01804 Published 2018-08-28 No fix listed CWE-120
TI-2018-02894 CVE-2018-3926 · GHSA-54c3-2724-2j2f

Integer underflow in Talos Samsung

Priority LOW 25

An exploitable integer underflow vulnerability exists in the ZigBee firmware update routine of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00421 Published 2018-08-28 No fix listed CWE-191
TI-2018-02895 CVE-2018-3927 · GHSA-53x2-3mx9-q64r

Improper certificate validation in Samsung

Priority LOW 32

An exploitable information disclosure vulnerability exists in the crash handler of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17.

CVSS 3.0MEDIUM 6.8 Network No auth No interaction EPSS 0.01138 Published 2018-08-27 No fix listed CWE-295
TI-2018-02872 CVE-2018-3904 · GHSA-w78f-68qf-58qw

Out-of-bounds write in Samsung

Priority MEDIUM 46

An exploitable buffer overflow vulnerability exists in the camera 'update' feature of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01753 Published 2018-08-27 No fix listed CWE-787
TI-2018-02879 CVE-2018-3911 · GHSA-6pr3-776m-wx79

HTTP response splitting in Samsung

Priority MEDIUM 40

An exploitable HTTP header injection vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01223 Published 2018-08-23 No fix listed CWE-113
Load more