Samsung Sth-Eth-250 Firmware vulnerabilities

40 CVEs affecting Samsung Sth-Eth-250 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-3915, published 2018-09-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-3856, published 2018-08-23. Critical severity, CVSS 9.9. EPSS: 3.4% chance of exploitation in the next 30 days. An exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The device incorrectly handles spaces in the URL…
CVE-2018-3867, published 2018-08-23. Critical severity, CVSS 9.9. EPSS: 2% chance of exploitation in the next 30 days. An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware…
CVE-2018-3876, published 2018-09-21. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the…
CVE-2018-3865, published 2018-09-20. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy overflows…
CVE-2018-3877, published 2018-09-21. Critical severity, CVSS 9.9. EPSS: 1.8% chance of exploitation in the next 30 days. An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the…
CVE-2018-3873, published 2018-09-21. Critical severity, CVSS 9.9. EPSS: 1.8% chance of exploitation in the next 30 days. An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the…
CVE-2018-3903, published 2018-08-23. Critical severity, CVSS 9.9. EPSS: 1.8% chance of exploitation in the next 30 days. On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on…
CVE-2018-3894, published 2018-09-21. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy call…
CVE-2018-3864, published 2018-09-20. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy overflows…
CVE-2018-3895, published 2018-08-28. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 Firmware version 0.20.17. The strncpy call…

Latest

CVE-2018-3915, published 2018-09-21. High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days. An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version…
CVE-2018-3914, published 2018-09-21. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version…
CVE-2018-3913, published 2018-09-21. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version…
CVE-2018-3906, published 2018-09-21. High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days. An exploitable stack-based buffer overflow vulnerability exists in the retrieval of a database field in video-core's HTTP server of Samsung SmartThings Hub. The video-core process insecurely extracts…
CVE-2018-3874, published 2018-09-21. Critical severity, CVSS 9.9. EPSS: 1.8% chance of exploitation in the next 30 days. An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the…