CVE-2017-16345

CVE-2017-16345 describes a critical buffer overflow vulnerability in Insteon Hub firmware version 1012, allowing an authenticated attacker to execute arbitrary code. The vulnerability stems from an unbounded strcpy operation when processing the 's_port' key in an HTTP request, leading to a buffer overflow on a 6-byte buffer. With a CVSS score of 9.9 (CRITICAL), this flaw presents a high risk of complete compromise (Confidentiality, Integrity, Availability) with low attack complexity and no user interaction required. While no public exploits (Metasploit, Nuclei, ExploitDB) or active exploitation (KEV) have been identified, and community discussion is minimal, the high FAUCET Risk Score of 80/100 indicates its significant potential impact.