Smartthings Hub Sth Eth 250
Approved changes feed: RSS · Atom
cpe:2.3:a:samsung:smartthings_hub_sth-eth-250:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Samsung (0eb241f7-997b-5d1c-b2a3-00a89e1049d3) |
|---|---|
| Product | Smartthings Hub Sth Eth 250 (a960457b-cdfd-5dd5-892b-d3f14de449bd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-3925 |
vulnerable | 2026-06-08 05:11:41.425142 |
Details available
HIGH (8.5)
An exploitable buffer overflow vulnerability exists in the remote video-host communication of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process insecurely parses the AWSELB cookie while communicating with remote video-host servers, leading to a buffer overflow on the heap. An attacker able to impersonate the remote HTTP servers could trigger this vulnerability.
Published: 2018-08-23T15:00:00.000Z
Updated: 2024-09-16T20:31:58.309Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3919 |
vulnerable | 2026-06-08 05:11:41.414005 |
Details available
HIGH (7.5)
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process insecurely extracts the fields from the "clips" table of its SQLite database, leading to a buffer overflow on the stack. An attacker can send a series of HTTP requests to trigger this vulnerability.
Published: 2018-08-23T15:00:00.000Z
Updated: 2024-09-16T23:55:26.216Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3917 |
vulnerable | 2026-06-08 05:11:41.413343 |
Details available
HIGH (7.5)
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" table of its SQLite database, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. The strcpy call overflows the destination buffer, which has a size of 16 bytes. An attacker can send an arbitrarily long "region" value in order to exploit this vulnerability.
Published: 2018-08-23T15:00:00.000Z
Updated: 2024-09-17T01:15:51.466Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3915 |
vulnerable | 2026-06-08 05:11:41.412646 |
Details available
HIGH (7.5)
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 64 bytes. An attacker can send an arbitrarily long "bucket" value in order to exploit this vulnerability.
Published: 2018-09-21T15:00:00.000Z
Updated: 2024-09-16T22:50:39.249Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3914 |
vulnerable | 2026-06-08 05:11:41.412301 |
Details available
HIGH (7.5)
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 2000 bytes. An attacker can send an arbitrarily long "sessionToken" value in order to exploit this vulnerability.
Published: 2018-09-21T15:00:00.000Z
Updated: 2024-09-16T17:48:04.400Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3912 |
vulnerable | 2026-06-08 05:11:41.411530 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3906 |
vulnerable | 2026-06-08 05:11:41.409156 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3905 |
vulnerable | 2026-06-08 05:11:41.408716 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3902 |
vulnerable | 2026-06-08 05:11:41.406314 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3897 |
vulnerable | 2026-06-08 05:11:41.400386 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3896 |
vulnerable | 2026-06-08 05:11:41.399933 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3894 |
vulnerable | 2026-06-08 05:11:41.399242 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3879 |
vulnerable | 2026-06-08 05:11:41.380999 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3878 |
vulnerable | 2026-06-08 05:11:41.380582 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3877 |
vulnerable | 2026-06-08 05:11:41.380126 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3876 |
vulnerable | 2026-06-08 05:11:41.379792 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3875 |
vulnerable | 2026-06-08 05:11:41.379473 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3874 |
vulnerable | 2026-06-08 05:11:41.379143 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3873 |
vulnerable | 2026-06-08 05:11:41.378809 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3867 |
vulnerable | 2026-06-08 05:11:41.374542 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3865 |
vulnerable | 2026-06-08 05:11:41.373730 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3864 |
vulnerable | 2026-06-08 05:11:41.373238 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3863 |
vulnerable | 2026-06-08 05:11:41.372788 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.