CVE-2018-3927 Information disclosure in Samsung

Medium 6.8 Published 27 Aug 2018 Updated 16 Sep 2024

An attacker can intercept crash reports sent by the SmartThings Hub to expose sensitive data due to insecure HTTPS validation.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-3927?

CVE-2018-3927 is a medium-severity vulnerability in Samsung, published on 27 Aug 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An exploitable information disclosure vulnerability exists in the crash handler of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. When hubCore crashes, Google Breakpad is used to record minidumps, which are sent over an insecure HTTPS connection to the backtrace.io service, leading to the exposure of sensitive data. An attacker can impersonate the remote backtrace.io server in order to trigger this vulnerability.

Weakness: CWE-295

Which versions are affected by CVE-2018-3927?

It affects 1 product.

Products include Samsung Sth-Eth-250 Firmware.

How do I fix CVE-2018-3927?

No fix has been published for CVE-2018-3927 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-3927 being exploited?

There is no known exploitation of CVE-2018-3927 in the wild and no public exploit code.

Sources

Also known as GHSA-53x2-3mx9-q64r.