Skip to main content

2864 222 Firmware

2 CVEs product

Monthly

CVE-2018-12640 Jun 23, 22:29 CRITICAL POC Act Now

The webService binary on Insteon HD IP Camera White 2864-222 devices has a Buffer Overflow via a crafted pid, pwd, or usr key in a GET request on port 34100. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow 2864 222 Firmware Insteon
NVD GitHub
CVSS 3.1
9.8
EPSS
1.6%
CVE-2018-11560 Jun 23, 22:29 CRITICAL POC Act Now

The webService binary on Insteon HD IP Camera White 2864-222 devices has a stack-based Buffer Overflow leading to Control-Flow Hijacking via a crafted usr key, as demonstrated by a long remoteIp. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption 2864 222 Firmware Insteon
NVD GitHub
CVSS 3.1
9.8
EPSS
1.6%
EPSS 2% CVSS 9.8
CRITICAL POC Act Now

The webService binary on Insteon HD IP Camera White 2864-222 devices has a Buffer Overflow via a crafted pid, pwd, or usr key in a GET request on port 34100. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow 2864 222 Firmware Insteon
NVD GitHub
EPSS 2% CVSS 9.8
CRITICAL POC Act Now

The webService binary on Insteon HD IP Camera White 2864-222 devices has a stack-based Buffer Overflow leading to Control-Flow Hijacking via a crafted usr key, as demonstrated by a long remoteIp. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption 2864 222 Firmware +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy