Security readout for executives and security teams
Plain-English summary
This vulnerability can let an unauthenticated network attacker cause deletion of cameras associated with an affected Samsung SmartThings Hub. The issue is tied to SmartThings Hub STH-ETH-250 firmware 0.20.17 and a hub service that relays unauthenticated messages to SmartThings remote servers.
Executive priority
Treat as a moderate-priority IoT exposure. It is not documented as actively exploited, but affected hubs could lose configured cameras, disrupting security monitoring or home automation workflows. Prioritize inventory, network restriction, and firmware remediation confirmation.
Technical view
The hubCore process listens on TCP port 39500 and relays unauthenticated messages to SmartThings remote servers. For a sync operation, the remote servers mishandle camera IDs, allowing arbitrary camera deletion. The CVSS vector is network-accessible, high complexity, no privileges, no user interaction, with low integrity and high availability impact.
Likely exposure
Exposure appears limited to Samsung SmartThings Hub STH-ETH-250 devices running firmware 0.20.17, especially where port 39500 is reachable from untrusted networks. The provided sources do not identify other affected firmware versions or products.
Exploitation context
The CVE describes exploitation by an HTTP request, but KEV is false and the supplied sources do not show active exploitation. Attack complexity is rated high, reducing likelihood, while unauthenticated access and camera deletion create meaningful operational risk.
Researcher notes
Evidence supports a SmartThings-specific unauthenticated message relay issue involving hubCore and remote server camera ID handling. The source bundle does not provide confirmed patched versions, broad product impact, or exploitation-in-the-wild evidence, so avoid extending scope beyond STH-ETH-250 firmware 0.20.17.
Mitigation direction
- Check Samsung SmartThings and Talos guidance for fixed firmware or vendor remediation.
- Restrict untrusted network access to TCP port 39500 on affected hubs.
- Segment SmartThings hubs onto a controlled IoT network.
- Retire or isolate firmware 0.20.17 devices if no supported update is available.
- Review camera inventory and recovery procedures for affected SmartThings deployments.
Validation and detection
- Inventory SmartThings Hub STH-ETH-250 devices and record firmware versions.
- Confirm whether firmware version 0.20.17 is present anywhere in use.
- Assess whether TCP port 39500 is reachable from untrusted networks.
- Review SmartThings configuration history for unexpected camera deletion events.
- Verify remediation status against current Samsung SmartThings vendor guidance.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2018-3918 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 6.5 (3.0)
- Known Exploited
- No
- Published
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H2.24.2Primary CVE scoreVulnerability scoring details
Base CVSS 3.0 score
6.5MediumVector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Source materials
- CVE List V5 sourceCVE List V5
- https://talosintelligence.com/vulnerability_reports/TALOS-2018-0582CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.