CVE-2017-16252

Specially crafted commands sent through the PubNub service in Insteon Hub 2245-222 with firmware version 1012 can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability.At 0x9d014cc0 the value for the cmd key is copied using strcpy to the buffer at $sp+0x11c. This buffer is 20 bytes large, sending anything longer will cause a buffer overflow.

• CWE-787

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0483Exploit, Issue Tracking, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0483Exploit, Issue Tracking, Third Party Advisory

Published

Aug 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-16244Cross-Site Request Forgery exists in OctoberCMS 1.0.426 (aka…
• CVE-2017-16248The Catalyst-Plugin-Static-Simple module before 0.34 for Per…
• CVE-2017-16249The Debut embedded http server contains a remotely exploitab…
• CVE-2017-1625IBM Pulse for QRadar 1.0.0 - 1.0.3 discloses sensitive infor…5.3
• CVE-2017-16250A vulnerability in Mitel ST 14.2, release GA28 and earlier, …
• CVE-2017-16251A vulnerability in the conferencing component of Mitel ST 14…
• CVE-2017-16253An exploitable buffer overflow vulnerability exists in the P…8.1
• CVE-2017-16254An exploitable buffer overflow vulnerability exists in the P…8.1
• CVE-2017-16255An exploitable buffer overflow vulnerability exists in the P…8.1
• CVE-2017-16256Multiple exploitable buffer overflow vulnerabilities exist i…9.9
• CVE-2017-16257Multiple exploitable buffer overflow vulnerabilities exist i…9.9
• CVE-2017-16258Multiple exploitable buffer overflow vulnerabilities exist i…9.9