CVE-2017-16253

An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012 for the cc channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP request At 0x9d014dd8 the value for the id key is copied using strcpy to the buffer at $sp+0x290. This buffer is 32 bytes large, sending anything longer will cause a buffer overflow.

• CWE-787

• https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483Exploit, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483Exploit, Third Party Advisory

Published

Mar 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-16248The Catalyst-Plugin-Static-Simple module before 0.34 for Per…
• CVE-2017-16249The Debut embedded http server contains a remotely exploitab…
• CVE-2017-1625IBM Pulse for QRadar 1.0.0 - 1.0.3 discloses sensitive infor…5.3
• CVE-2017-16250A vulnerability in Mitel ST 14.2, release GA28 and earlier, …
• CVE-2017-16251A vulnerability in the conferencing component of Mitel ST 14…
• CVE-2017-16252Specially crafted commands sent through the PubNub service i…8.1
• CVE-2017-16254An exploitable buffer overflow vulnerability exists in the P…8.1
• CVE-2017-16255An exploitable buffer overflow vulnerability exists in the P…8.1
• CVE-2017-16256Multiple exploitable buffer overflow vulnerabilities exist i…9.9
• CVE-2017-16257Multiple exploitable buffer overflow vulnerabilities exist i…9.9
• CVE-2017-16258Multiple exploitable buffer overflow vulnerabilities exist i…9.9
• CVE-2017-16259Multiple exploitable buffer overflow vulnerabilities exist i…9.9