Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2018-3878: Samsung SmartThings Hub may be compromised by long region value

CVE-2018-3878 · published 8 years ago

Summary

The video handling component in the Samsung SmartThings Hub (firmware 0.20.17) does not correctly limit the size of a field called "region" in data it receives over the network. An attacker who sends a very long region string can cause the device to overwrite memory, potentially taking control of the hub or causing it to stop working. Update the hub firmware to the latest version or apply the vendor's patch to fix the problem.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
samsung	sth-eth-250_firmware	0.20.17 `cpe:2.3:o:samsung:sth-eth-250_firmware:0.20.17:::::::*`

Original advisory text

Multiple exploitable buffer overflow vulnerabilities exist in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. A strncpy overflows the destination buffer, which has a size of 16 bytes. An attacker can send an arbitrarily long "region" value in order to exploit this vulnerability.

References

https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0555 Exploit Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

9.9 Critical

Exploitation

2% chance of attack within 30 days

Type

CWE-119Buffer Overflow

Timeline

Published23 Aug 2018

Updated3 Nov 2026

First seen29 Sep 2026

Sources

CVE-2018-3878 · NVD

Track software like this

Free during beta