2864 222 Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2018-06-23	CVE-2018-12640	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Insteon 2864-222 Firmware The webService binary on Insteon HD IP Camera White 2864-222 devices has a Buffer Overflow via a crafted pid, pwd, or usr key in a GET request on port 34100. network low complexity insteon CWE-119	7.5
2018-06-23	CVE-2018-11560	Out-of-bounds Write vulnerability in Insteon 2864-222 Firmware The webService binary on Insteon HD IP Camera White 2864-222 devices has a stack-based Buffer Overflow leading to Control-Flow Hijacking via a crafted usr key, as demonstrated by a long remoteIp parameter to cgi-bin/CGIProxy.fcgi on port 34100. network low complexity insteon CWE-787	7.5