Vulnerabilities (CVE)

Filtered by vendor Insteon Subscribe
Filtered by product Insteon Hub
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-5251 1 Insteon 2 Insteon Hub, Insteon Hub Firmware 2019-10-09 6.8 MEDIUM 8.1 HIGH
In version 1012 and prior of Insteon's Insteon Hub, the radio transmissions used for communication between the hub and connected devices are not encrypted.
CVE-2017-16348 1 Insteon 2 Insteon Hub, Insteon Hub Firmware 2018-10-15 7.8 HIGH 7.5 HIGH
An exploitable denial of service vulnerability exists in Insteon Hub running firmware version 1012. Leftover demo functionality allows for arbitrarily rebooting the device without authentication. An attacker can send a UDP packet to trigger this vulnerability.