[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxwRb1Gu01aNuvzsu_udmohtcWTZFjoh0TrtaMJafgyI":3,"g5a-risk:CVE-2018-3867":122},{"success":4,"data":5,"meta":120},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":27,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":60,"references":61,"referencesCount":68,"weaknesses":69,"weaknessesCount":68,"isActivelyExploited":78,"cisaInfo":27,"otxData":27,"relatedBlogPosts":79,"seoMetadata":80,"configurations":105,"relatedVendorCves":118,"notableEvents":119},"CVE-2018-3867","What is CVE-2018-3867?","An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly handles the answer received from a smart camera, leading to a buffer overflow on the stack. An attacker can send a series of HTTP requests to trigger this vulnerability.","An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-core's HTTP server of Samsung SmartThin...","2018-08-23T15:29:00.757","2023-04-26T18:39:05.247",9.9,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":37,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","CHANGED","HIGH","CRITICAL",null,3.1,6,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":28,"ImpactScore":29},"talos-cna@cisco.com","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":25,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":40,"VectorString":41,"AccessVector":21,"AccessComplexity":22,"Authentication":42,"ConfidentialityImpact":43,"IntegrityImpact":43,"AvailabilityImpact":43,"BaseScore":44,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:C\u002FI:C\u002FA:C","SINGLE","COMPLETE",9,8,10,0.02014,[47,47,47,47,47,47,47],"Critical",[51,56],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"samsung","sth-eth-250_firmware","0.20.17","cpe:2.3:o:samsung:sth-eth-250_firmware:0.20.17:*:*:*:*:*:*:*",{"vendor":52,"product":57,"version":58,"criteria":59,"vulnerable":4},"sth-eth-250","-","cpe:2.3:h:samsung:sth-eth-250:-:*:*:*:*:*:*:*",2,[62],{"url":63,"source":64,"tags":65},"https:\u002F\u002Fwww.talosintelligence.com\u002Fvulnerability_reports\u002FTALOS-2018-0549","Talosintelligence",[66,67],"Exploit","Third Party Advisory",1,[70],{"id":71,"name":72,"description":73,"extendedDescription":74,"status":75,"abstraction":76,"structure":77},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",false,[],{"title":81,"metaDescription":82,"keywords":83,"canonicalUrl":84,"structuredData":85},"What is CVE-2018-3867? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2018-3867, a critical severity cyber security vulnerability from 2018. An exploitable stack-based buffer overflow vulnerability...","CVE-2018-3867, CVE-2018-3867 vulnerability, CVE-2018-3867 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, samsung security, sth-eth-250_firmware vulnerability, sth-eth-250 vulnerability","\u002Fwhat-is\u002Fcve-2018-3867",{"@context":86,"@type":87,"headline":81,"description":82,"datePublished":10,"dateModified":11,"author":88,"publisher":92,"about":96,"mainEntityOfPage":100,"articleSection":103,"keywords":104},"https:\u002F\u002Fschema.org","TechArticle",{"@type":89,"name":90,"url":91},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":89,"name":90,"url":91,"logo":93},{"@type":94,"url":95},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":97,"name":6,"description":98,"additionalType":99},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":101,"@id":102},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2018-3867","Cybersecurity","CVE-2018-3867, CVE-2018-3867 vulnerability, CVE-2018-3867 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[106],{"Operator":107,"Negate":27,"Nodes":108},"AND",[109,114],{"Operator":110,"Negate":27,"CPEMatch":111},"OR",[112],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":113,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"69ED63CA-72C3-4337-B1ED-1696DB316B0F",{"Operator":110,"Negate":27,"CPEMatch":115},[116],{"Vulnerable":27,"Criteria":59,"MatchCriteriaID":117,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4B42493E-7140-4A19-B94A-2F6262D0BCDA",[],[],{"lastModified":11,"cacheTime":121,"version":40},1793212415886,{"score":123,"band":124,"action":125,"scoredAt":126},54,"Medium","Plan remediation","2026-10-28T06:44:36.661308+00:00"]