VulnerabilityModified
CVE-2017-14443
An exploitable information leak vulnerability exists in Insteon Hub running firmware version 1012.
MEDIUM 6.5EPSS 1.77%
Does this matter?
Lower severity and a low EPSS score (1.77%). Track it; it rarely justifies an emergency change on its own.
Description
An exploitable information leak vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation incorrectly checks the number of GET parameters supplied, leading to an arbitrarily controlled information leak on the whole device memory. An attacker can send an authenticated HTTP request to trigger this vulnerability.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 1.77% probability · 77th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- insteon/hub 2245-222 firmware
- Source
- talos-cna@cisco.com
References
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0492Exploit, Third Party Advisory
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0492Exploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.