CVE-2018-3925
Last modified
CVE-2018-3925 is a vulnerability of currently unknown severity. An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process insecurely parses the AWSELB cookie while communicating with remote video-host servers, leading to a buffer overflow on the heap. EPSS estimates a 1.47% chance of exploitation in the next 30 days.
Description
An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process insecurely parses the AWSELB cookie while communicating with remote video-host servers, leading to a buffer overflow on the heap. An attacker able to impersonate the remote HTTP servers could trigger this vulnerability.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Samsung | Sth-Eth-250 Firmware | 0.20.17 |
References
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0591Exploit, Third Party Advisory
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0591Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-3925?
How severe is CVE-2018-3925?
How do I fix CVE-2018-3925?
Are you affected by CVE-2018-3925?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST