Vulnerability Spotlight: Multiple Vulnerabilities in Samsung Smart Things Hub
Summary: Cisco Talos researcher Claudio Bozzato found multiple vulnerabilities in the Linux-based Samsung SmartThings Hub, a central controller for smart plugs, lights, thermostats and cameras, with the last of three notable chains allowing remote compromise without prior authentication. The flaws sit in the video-core HTTP server, including buffer overflows in the samsungWifiScan and credentials handlers, a SQL injection via unsanitized JSON stored in an internal SQLite database, and a camera-password flaw that lets an attacker pass command-line options to ffmpeg, tracked as CVE-2018-3856 through CVE-2018-3904.
What you should know: A hub that sits at the center of a home's IoT devices and holds camera credentials is a single point of access to sensitive information and physical control, and one of these chains needs no authentication at all.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2018-3856CVE-2018-3863CVE-2018-3866CVE-2018-3867
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026