Skip to main content

Sth Eth 250 Firmware CVE-2018-3907

CRITICAL
HTTP Request/Response Smuggling (CWE-444)
2018-08-24 talos-cna@cisco.com
10.0
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
10.0 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
None
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Aug 24, 2018 - 00:29 nvd
CRITICAL 10.0

DescriptionNVD

An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly handles pipelined HTTP requests, which allows successive requests to overwrite the previously parsed HTTP method, 'on_url' callback. An attacker can send an HTTP request to trigger this vulnerability.

AnalysisAI

An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as HTTP Request/Response Smuggling (CWE-444), which allows attackers to manipulate HTTP request interpretation between frontend and backend servers. An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly handles pipelined HTTP requests, which allows successive requests to overwrite the previously parsed HTTP method, 'on_url' callback. An attacker can send an HTTP request to trigger this vulnerability. Affected products include: Samsung Sth-Eth-250 Firmware. Version information: version 0.20.17..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Enforce strict HTTP parsing, normalize requests at proxy layer, use HTTP/2 end-to-end, reject ambiguous headers.

CVE-2018-3877 CRITICAL POC
9.9 Sep 21

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung Sm

CVE-2018-3874 CRITICAL POC
9.9 Sep 21

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung Sm

CVE-2018-3873 CRITICAL POC
9.9 Sep 21

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung Sm

CVE-2018-3875 CRITICAL POC
9.9 Sep 10

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung Sm

CVE-2018-3904 CRITICAL POC
9.9 Aug 27

An exploitable buffer overflow vulnerability exists in the camera 'update' feature of video-core's HTTP server of Samsun

CVE-2018-3880 CRITICAL POC
9.9 Aug 23

An exploitable stack-based buffer overflow vulnerability exists in the database 'find-by-cameraId' functionality of vide

CVE-2018-3872 CRITICAL POC
9.9 Aug 23

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung Sm

CVE-2018-3866 CRITICAL POC
9.9 Aug 23

An exploitable buffer overflow vulnerability exists in the samsungWifiScan handler of video-core's HTTP server of Samsun

CVE-2018-3856 CRITICAL POC
9.9 Aug 23

An exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung SmartThings Hub STH-ETH-250 -

CVE-2018-3925 CRITICAL POC
9.9 Aug 23

An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTTP server o

CVE-2018-3919 CRITICAL POC
9.9 Aug 23

An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in video-core's HTTP

CVE-2018-3917 CRITICAL POC
9.9 Aug 23

On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts

Share

CVE-2018-3907 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy