Skip to content
OpenAdvisories
Critical · 9.9 CVE-2018-3856 EUVD-2018-15642GHSA-3v82-5w89-j5ww

An exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0…

Published Aug 23, 2018 · Updated Sep 16, 2024 · Assigned by talos

Description

An exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The device incorrectly handles spaces in the URL field, leading to an arbitrary operating system command injection. An attacker can send a series of HTTP requests to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Samsung Samsung Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17 —

References