CVE-2017-16283

CVE-2017-16283 describes multiple critical stack-based buffer overflow vulnerabilities in the PubNub message handler of Insteon Hub firmware version 1012. An authenticated attacker can exploit these flaws by sending specially crafted commands through the PubNub service, specifically by providing an overly long value for the 'name' key in the 'cmd s_name' command. This vulnerability has a CVSS score of 9.9 (Critical), indicating a network-exploitable flaw with low attack complexity, requiring only low privileges, and leading to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation (KEV) or public exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion with 10 mentions, placing it in the top 1% of all CVEs for community attention.