Approved changes feed: RSS · Atom

cpe:2.3:a:insteon:hub:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorInsteon (7b3e838e-214f-5b6e-a9e1-be9bcbb5f079)
ProductHub (88f771b6-a147-555d-b90b-b876e5bdb7c0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-16336 vulnerable 2026-06-08 05:09:00.345527 Details available
HIGH (8.5)
Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_event_var, at 0x9d01eeb0, the value for the `s_value` key is copied using `strcpy` to the buffer at `$sp+0x10`.This buffer is 244 bytes large, sending anything longer will cause a buffer overflow.
Published: 2023-01-11T21:40:08.350Z
Updated: 2025-04-08T14:22:37.795Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16335 vulnerable 2026-06-08 05:09:00.345181 Details available
HIGH (8.5)
Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_event_var, at 0x9d01ee70, the value for the `s_offset` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow.
Published: 2023-01-11T21:40:08.256Z
Updated: 2025-04-08T14:24:07.375Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16334 vulnerable 2026-06-08 05:09:00.344818 Details available
HIGH (8.5)
Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_event, at 0x9d01edb8, the value for the `s_raw` key is copied using `strcpy` to the buffer at `$sp+0x10`.This buffer is 244 bytes large, sending anything longer will cause a buffer overflow.
Published: 2023-01-11T21:40:08.161Z
Updated: 2025-04-08T14:25:27.491Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16333 vulnerable 2026-06-08 05:09:00.344474 Details available
HIGH (8.5)
Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_event, at 0x9d01ed7c, the value for the `s_offset` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow.
Published: 2023-01-11T21:40:08.055Z
Updated: 2025-04-08T14:26:57.711Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16332 vulnerable 2026-06-08 05:09:00.344112 Details available
HIGH (8.5)
Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should send an authenticated HTTP request to trigger this vulnerability. In cmd s_event_alarm, at 0x9d01ec34, the value for the `s_aid` key is copied using `strcpy` to the buffer at `$sp+0x2b0`.This buffer is 32 bytes large, sending anything longer will cause a buffer overflow.
Published: 2023-01-11T21:40:02.935Z
Updated: 2025-04-08T14:28:02.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16331 vulnerable 2026-06-08 05:09:00.343753 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16330 vulnerable 2026-06-08 05:09:00.343400 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16329 vulnerable 2026-06-08 05:09:00.343057 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16328 vulnerable 2026-06-08 05:09:00.342700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16327 vulnerable 2026-06-08 05:09:00.342346 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16326 vulnerable 2026-06-08 05:09:00.341993 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16325 vulnerable 2026-06-08 05:09:00.341634 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16324 vulnerable 2026-06-08 05:09:00.341264 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16323 vulnerable 2026-06-08 05:09:00.340900 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16322 vulnerable 2026-06-08 05:09:00.340543 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16321 vulnerable 2026-06-08 05:09:00.340181 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16320 vulnerable 2026-06-08 05:09:00.339677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16319 vulnerable 2026-06-08 05:09:00.339325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16318 vulnerable 2026-06-08 05:09:00.338950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16317 vulnerable 2026-06-08 05:09:00.338503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16316 vulnerable 2026-06-08 05:09:00.338159 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16315 vulnerable 2026-06-08 05:09:00.337800 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16314 vulnerable 2026-06-08 05:09:00.337448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16313 vulnerable 2026-06-08 05:09:00.337099 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16312 vulnerable 2026-06-08 05:09:00.336752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16311 vulnerable 2026-06-08 05:09:00.336451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16310 vulnerable 2026-06-08 05:09:00.336113 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16309 vulnerable 2026-06-08 05:09:00.335776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16308 vulnerable 2026-06-08 05:09:00.335432 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16307 vulnerable 2026-06-08 05:09:00.335071 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16306 vulnerable 2026-06-08 05:09:00.334720 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16305 vulnerable 2026-06-08 05:09:00.334382 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16304 vulnerable 2026-06-08 05:09:00.334024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16303 vulnerable 2026-06-08 05:09:00.333669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16302 vulnerable 2026-06-08 05:09:00.333319 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16301 vulnerable 2026-06-08 05:09:00.332957 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16300 vulnerable 2026-06-08 05:09:00.332577 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16299 vulnerable 2026-06-08 05:09:00.332222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16298 vulnerable 2026-06-08 05:09:00.331852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16297 vulnerable 2026-06-08 05:09:00.331483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16296 vulnerable 2026-06-08 05:09:00.331064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16295 vulnerable 2026-06-08 05:09:00.319237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16294 vulnerable 2026-06-08 05:09:00.318890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16293 vulnerable 2026-06-08 05:09:00.318549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16292 vulnerable 2026-06-08 05:09:00.318197 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16291 vulnerable 2026-06-08 05:09:00.317828 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16290 vulnerable 2026-06-08 05:09:00.317468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16289 vulnerable 2026-06-08 05:09:00.316998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16288 vulnerable 2026-06-08 05:09:00.316635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16287 vulnerable 2026-06-08 05:09:00.316285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16286 vulnerable 2026-06-08 05:09:00.315911 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16285 vulnerable 2026-06-08 05:09:00.315564 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16284 vulnerable 2026-06-08 05:09:00.315213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16283 vulnerable 2026-06-08 05:09:00.314859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16282 vulnerable 2026-06-08 05:09:00.314495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16281 vulnerable 2026-06-08 05:09:00.314142 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16280 vulnerable 2026-06-08 05:09:00.313777 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16279 vulnerable 2026-06-08 05:09:00.313412 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16278 vulnerable 2026-06-08 05:09:00.313038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16277 vulnerable 2026-06-08 05:09:00.312670 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16276 vulnerable 2026-06-08 05:09:00.312283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16275 vulnerable 2026-06-08 05:09:00.311803 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16274 vulnerable 2026-06-08 05:09:00.311447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16273 vulnerable 2026-06-08 05:09:00.311085 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16272 vulnerable 2026-06-08 05:09:00.310709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16271 vulnerable 2026-06-08 05:09:00.310348 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16270 vulnerable 2026-06-08 05:09:00.309775 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16269 vulnerable 2026-06-08 05:09:00.309397 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16268 vulnerable 2026-06-08 05:09:00.309033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16267 vulnerable 2026-06-08 05:09:00.308673 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16266 vulnerable 2026-06-08 05:09:00.308317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16265 vulnerable 2026-06-08 05:09:00.307932 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16264 vulnerable 2026-06-08 05:09:00.307553 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16263 vulnerable 2026-06-08 05:09:00.307063 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16262 vulnerable 2026-06-08 05:09:00.306707 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16261 vulnerable 2026-06-08 05:09:00.306329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16260 vulnerable 2026-06-08 05:09:00.305947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16259 vulnerable 2026-06-08 05:09:00.305598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16258 vulnerable 2026-06-08 05:09:00.305223 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16257 vulnerable 2026-06-08 05:09:00.304813 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16256 vulnerable 2026-06-08 05:09:00.303577 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14454 vulnerable 2026-06-08 05:08:49.975462 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.