Skip to main content

Sth Eth 250 Firmware CVE-2018-3927

MEDIUM
Improper Certificate Validation (CWE-295)
2018-08-27 talos-cna@cisco.com
5.9
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
5.9 MEDIUM
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Aug 27, 2018 - 15:29 nvd
MEDIUM 5.9

DescriptionNVD

An exploitable information disclosure vulnerability exists in the crash handler of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. When hubCore crashes, Google Breakpad is used to record minidumps, which are sent over an insecure HTTPS connection to the backtrace.io service, leading to the exposure of sensitive data. An attacker can impersonate the remote backtrace.io server in order to trigger this vulnerability.

AnalysisAI

An exploitable information disclosure vulnerability exists in the crash handler of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-295. An exploitable information disclosure vulnerability exists in the crash handler of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. When hubCore crashes, Google Breakpad is used to record minidumps, which are sent over an insecure HTTPS connection to the backtrace.io service, leading to the exposure of sensitive data. An attacker can impersonate the remote backtrace.io server in order to trigger this vulnerability. Affected products include: Samsung Sth-Eth-250 Firmware. Version information: version 0.20.17..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2018-3907 CRITICAL POC
10.0 Aug 24

An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ET

CVE-2018-3877 CRITICAL POC
9.9 Sep 21

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung Sm

CVE-2018-3874 CRITICAL POC
9.9 Sep 21

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung Sm

CVE-2018-3873 CRITICAL POC
9.9 Sep 21

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung Sm

CVE-2018-3875 CRITICAL POC
9.9 Sep 10

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung Sm

CVE-2018-3904 CRITICAL POC
9.9 Aug 27

An exploitable buffer overflow vulnerability exists in the camera 'update' feature of video-core's HTTP server of Samsun

CVE-2018-3880 CRITICAL POC
9.9 Aug 23

An exploitable stack-based buffer overflow vulnerability exists in the database 'find-by-cameraId' functionality of vide

CVE-2018-3872 CRITICAL POC
9.9 Aug 23

An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung Sm

CVE-2018-3866 CRITICAL POC
9.9 Aug 23

An exploitable buffer overflow vulnerability exists in the samsungWifiScan handler of video-core's HTTP server of Samsun

CVE-2018-3856 CRITICAL POC
9.9 Aug 23

An exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung SmartThings Hub STH-ETH-250 -

CVE-2018-3925 CRITICAL POC
9.9 Aug 23

An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTTP server o

CVE-2018-3919 CRITICAL POC
9.9 Aug 23

An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in video-core's HTTP

Share

CVE-2018-3927 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy