[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPtVevDDG4or9vqyX1ckMVgsvqfBlgEg-aLSqIHALx_I":3,"g5a-ex:samsung\u002Fsth-eth-250@*":84,"g5a-family:samsung\u002Fsth-eth-250":86},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":61,"seoMetadata":62,"meta":81},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"samsung","sth-eth-250",0,40,"2018-09-21",[],"Sth-eth-250 by Samsung is a technology product and 40 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,29,35,40,45,48,51,54,57],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2018-3856","An exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The device incorrectly handles spaces in the URL field, leading to an arbitrary operating system command injection. An attacker can send a series of HTTP requests to trigger this vulnerability.","2018-08-23",9.9,"v3.1","Critical",false,0.03444,{"cveId":26,"description":27,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":28},"CVE-2018-3867","An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly handles the answer received from a smart camera, leading to a buffer overflow on the stack. An attacker can send a series of HTTP requests to trigger this vulnerability.",0.02014,{"cveId":30,"description":31,"publishedDate":11,"cvssScore":32,"cvssVersion":21,"severity":33,"isKev":23,"epssScore":34},"CVE-2018-3876","An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the destination buffer, which has a size of 64 bytes. An attacker can send an arbitrarily long \"bucket\" value in order to exploit this vulnerability.",8.8,"High",0.01871,{"cveId":36,"description":37,"publishedDate":38,"cvssScore":32,"cvssVersion":21,"severity":33,"isKev":23,"epssScore":39},"CVE-2018-3865","An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily long \"cameraIp\" value in order to exploit this vulnerability.","2018-09-20",0.01827,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":32,"cvssVersion":21,"severity":33,"isKev":23,"epssScore":44},"CVE-2018-3893","An exploitable buffer overflow vulnerability exists in the \u002Fcameras\u002FXXXX\u002Fclips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability.","2018-08-27",0.01804,{"cveId":46,"description":47,"publishedDate":38,"cvssScore":32,"cvssVersion":21,"severity":33,"isKev":23,"epssScore":44},"CVE-2018-3864","An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily long \"password\" value in order to exploit this vulnerability.",{"cveId":49,"description":50,"publishedDate":11,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":44},"CVE-2018-3873","An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the destination buffer, which has a size of 128 bytes. An attacker can send an arbitrarily long \"secretKey\" value in order to exploit this vulnerability.",{"cveId":52,"description":53,"publishedDate":11,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":44},"CVE-2018-3877","An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the destination buffer, which has a size of 160 bytes. An attacker can send an arbitrarily long \"directory\" value in order to exploit this vulnerability.",{"cveId":55,"description":56,"publishedDate":11,"cvssScore":32,"cvssVersion":21,"severity":33,"isKev":23,"epssScore":44},"CVE-2018-3894","An exploitable buffer overflow vulnerability exists in the \u002Fcameras\u002FXXXX\u002Fclips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily long \"startTime\" value in order to exploit this vulnerability.",{"cveId":58,"description":59,"publishedDate":60,"cvssScore":32,"cvssVersion":21,"severity":33,"isKev":23,"epssScore":44},"CVE-2018-3895","An exploitable buffer overflow vulnerability exists in the \u002Fcameras\u002FXXXX\u002Fclips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 Firmware version 0.20.17. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily long 'endTime' value in order to exploit this vulnerability. An attacker can send an HTTP request to trigger this vulnerability.","2018-08-28",[],{"title":63,"metaDescription":64,"keywords":65,"structuredData":66},"Sth-eth-250 by Samsung - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Sth-eth-250 by Samsung with 40 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Sth-eth-250 vulnerabilities, Sth-eth-250 security, Sth-eth-250 CVE, Samsung Sth-eth-250, Sth-eth-250 threat intelligence, Samsung security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":67,"@type":68,"name":69,"description":64,"url":70,"manufacturer":71,"applicationCategory":75,"softwareVersion":76,"mainEntity":77},"https:\u002F\u002Fschema.org","SoftwareApplication","Sth-eth-250","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsamsung\u002Fsth-eth-250",{"@type":72,"name":73,"url":74},"Organization","Samsung","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fsamsung","Security Software","Multiple versions",{"@type":78,"name":79,"description":80,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Sth-eth-250 Security Vulnerabilities","Security vulnerabilities affecting Sth-eth-250 by Samsung",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":82,"apiVersion":83},"2026-10-29T00:14:26.840Z","3.0",{"rows":85,"total":9,"capped":23,"failed":9},[],[87],{"product":88,"cves":10},"sth-eth-250_firmware"]