Security readout for executives and security teams
Plain-English summary
A Samsung SmartThings Hub firmware version contains a memory corruption flaw in its video-core HTTP service. If the required conditions are met, an attacker could crash or potentially take control of that process, affecting confidentiality, integrity, and availability of the hub.
Executive priority
Treat this as a high-priority legacy IoT risk if affected hubs are still deployed. Urgency is highest where hubs manage sensitive physical environments, remain on firmware 0.20.17, or are reachable from untrusted networks.
Technical view
CVE-2018-3906 is a stack-based buffer overflow in video-core's HTTP server on Samsung SmartThings Hub STH-ETH-250 firmware 0.20.17. The flaw occurs when shard.videoHostURL is extracted from an SQLite database field and can be triggered by an HTTP request.
Likely exposure
Exposure appears limited to Samsung SmartThings Hub STH-ETH-250 running firmware 0.20.17. The CVSS vector indicates local access, high complexity, and high privileges, so broad internet-scale exposure is not supported by the provided sources.
Exploitation context
The source bundle does not show CISA KEV listing or cited evidence of active exploitation. Public reporting says an HTTP request can trigger the vulnerable path, but the CVSS vector indicates significant prerequisites: local access, high complexity, and high privileges.
Researcher notes
Key unknowns are patch status and exact prerequisite path to control shard.videoHostURL. The CVSS vector suggests exploitation is constrained despite the HTTP trigger. Avoid assuming remote unauthenticated exploitation unless a vendor advisory or exploit analysis supports it.
Mitigation direction
- Inventory Samsung SmartThings Hub STH-ETH-250 devices and record firmware versions.
- Check Samsung or vendor guidance for fixed firmware or replacement options.
- Prioritize upgrading or retiring hubs still running firmware 0.20.17.
- Restrict hub management and HTTP access to trusted local networks only.
- Monitor vulnerable hubs for video-core crashes, restarts, or unexpected behavior.
Validation and detection
- Confirm whether any deployed hubs are STH-ETH-250 on firmware 0.20.17.
- Verify the hub is not reachable from untrusted networks.
- Review device and network logs for unusual HTTP access or service instability.
- Confirm remediation by documenting updated firmware or device replacement status.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
Database behavior lookup
The CVE wording references database injection or access, so collection and exfiltration review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2018-3906 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 7.5 (3.0)
- Known Exploited
- No
- Published
Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H0.86Primary CVE scoreVulnerability scoring details
Base CVSS 3.0 score
7.5HighVector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Source materials
- CVE List V5 sourceCVE List V5
- https://talosintelligence.com/vulnerability_reports/TALOS-2018-0576CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.