CVE-2017-16255

An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP request at At 0x9d014e84 the value for the cmd1 key is copied using strcpy to the buffer at $sp+0x280. This buffer is 16 bytes large.

• CWE-120

• https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483Exploit, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483Exploit, Third Party Advisory

Published

Mar 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1625IBM Pulse for QRadar 1.0.0 - 1.0.3 discloses sensitive infor…5.3
• CVE-2017-16250A vulnerability in Mitel ST 14.2, release GA28 and earlier, …
• CVE-2017-16251A vulnerability in the conferencing component of Mitel ST 14…
• CVE-2017-16252Specially crafted commands sent through the PubNub service i…8.1
• CVE-2017-16253An exploitable buffer overflow vulnerability exists in the P…8.1
• CVE-2017-16254An exploitable buffer overflow vulnerability exists in the P…8.1
• CVE-2017-16256Multiple exploitable buffer overflow vulnerabilities exist i…9.9
• CVE-2017-16257Multiple exploitable buffer overflow vulnerabilities exist i…9.9
• CVE-2017-16258Multiple exploitable buffer overflow vulnerabilities exist i…9.9
• CVE-2017-16259Multiple exploitable buffer overflow vulnerabilities exist i…9.9
• CVE-2017-16260Multiple exploitable buffer overflow vulnerabilities exist i…9.9
• CVE-2017-16261Multiple exploitable buffer overflow vulnerabilities exist i…8.8