CVE-2017-5251 | BDVDB-2026-96996 Detail

InsteonInsteon Hub Firmware

Description#

In version 1012 and prior of Insteon's Insteon Hub, the radio transmissions used for communication between the hub and connected devices are not encrypted.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-294 Authentication Bypass by Capture-replay

References#

https://blog.rapid7.com/2017/09/22/multiple-vulnerabilities-in-wink-and-insteon-smart-home-systems/

Exploit#

No public exploit known

History#

Version 12018-02-22Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.