[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fY35uOrdxt618tcGPsNZ0xYySNcQSb5orZBGx45nCtB0":3,"g5a-ex:samsung\u002Fsth-eth-250_firmware@*":88,"g5a-family:samsung\u002Fsth-eth-250_firmware":90},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":65,"seoMetadata":66,"meta":85},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":17},"samsung","sth-eth-250_firmware",1,40,0,"2018-09-21",[14],{"version":15,"cve_count":10,"kev_count":11,"has_kev":16},"0.20.17",false,"Sth-eth-250 Firmware by Samsung is a technology product with 1 tracked version and 40 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":15,"cve_count":10,"kev_count":11,"has_kev":16},[21,29,33,39,44,49,52,55,58,61],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":28},"CVE-2018-3856","An exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The device incorrectly handles spaces in the URL field, leading to an arbitrary operating system command injection. An attacker can send a series of HTTP requests to trigger this vulnerability.","2018-08-23",9.9,"v3.1","Critical",0.03444,{"cveId":30,"description":31,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":32},"CVE-2018-3867","An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly handles the answer received from a smart camera, leading to a buffer overflow on the stack. An attacker can send a series of HTTP requests to trigger this vulnerability.",0.02014,{"cveId":34,"description":35,"publishedDate":12,"cvssScore":36,"cvssVersion":26,"severity":37,"isKev":16,"epssScore":38},"CVE-2018-3876","An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the destination buffer, which has a size of 64 bytes. An attacker can send an arbitrarily long \"bucket\" value in order to exploit this vulnerability.",8.8,"High",0.01871,{"cveId":40,"description":41,"publishedDate":42,"cvssScore":36,"cvssVersion":26,"severity":37,"isKev":16,"epssScore":43},"CVE-2018-3865","An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily long \"cameraIp\" value in order to exploit this vulnerability.","2018-09-20",0.01827,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":36,"cvssVersion":26,"severity":37,"isKev":16,"epssScore":48},"CVE-2018-3893","An exploitable buffer overflow vulnerability exists in the \u002Fcameras\u002FXXXX\u002Fclips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability.","2018-08-27",0.01804,{"cveId":50,"description":51,"publishedDate":42,"cvssScore":36,"cvssVersion":26,"severity":37,"isKev":16,"epssScore":48},"CVE-2018-3864","An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily long \"password\" value in order to exploit this vulnerability.",{"cveId":53,"description":54,"publishedDate":12,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":48},"CVE-2018-3873","An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the destination buffer, which has a size of 128 bytes. An attacker can send an arbitrarily long \"secretKey\" value in order to exploit this vulnerability.",{"cveId":56,"description":57,"publishedDate":12,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":48},"CVE-2018-3877","An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy overflows the destination buffer, which has a size of 160 bytes. An attacker can send an arbitrarily long \"directory\" value in order to exploit this vulnerability.",{"cveId":59,"description":60,"publishedDate":12,"cvssScore":36,"cvssVersion":26,"severity":37,"isKev":16,"epssScore":48},"CVE-2018-3894","An exploitable buffer overflow vulnerability exists in the \u002Fcameras\u002FXXXX\u002Fclips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily long \"startTime\" value in order to exploit this vulnerability.",{"cveId":62,"description":63,"publishedDate":64,"cvssScore":36,"cvssVersion":26,"severity":37,"isKev":16,"epssScore":48},"CVE-2018-3895","An exploitable buffer overflow vulnerability exists in the \u002Fcameras\u002FXXXX\u002Fclips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 Firmware version 0.20.17. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily long 'endTime' value in order to exploit this vulnerability. An attacker can send an HTTP request to trigger this vulnerability.","2018-08-28",[],{"title":67,"metaDescription":68,"keywords":69,"structuredData":70},"Sth-eth-250 Firmware by Samsung - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Sth-eth-250 Firmware by Samsung covering 1 version with 40 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Sth-eth-250 Firmware vulnerabilities, Sth-eth-250 Firmware security, Sth-eth-250 Firmware CVE, Samsung Sth-eth-250 Firmware, Sth-eth-250 Firmware threat intelligence, Samsung security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":71,"@type":72,"name":73,"description":68,"url":74,"manufacturer":75,"applicationCategory":79,"softwareVersion":80,"mainEntity":81},"https:\u002F\u002Fschema.org","SoftwareApplication","Sth-eth-250 Firmware","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsamsung\u002Fsth-eth-250_firmware",{"@type":76,"name":77,"url":78},"Organization","Samsung","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fsamsung","Security Software","1 versions tracked",{"@type":82,"name":83,"description":84,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Sth-eth-250 Firmware Security Vulnerabilities","Security vulnerabilities affecting Sth-eth-250 Firmware by Samsung",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":86,"apiVersion":87},"2026-10-28T20:11:44.954Z","3.0",{"rows":89,"total":11,"capped":16,"failed":11},[],[]]