insteon hub firmware

Name: insteon hub firmware
Brand: insteon

productUS

cpe:2.3:o:insteon:hub_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

87critical10high0medium0low

updated 2026-10-28

vulnerabilities (97)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2013-4859US	high8.1OT elevated	6.97% (94th)	Exploit	no fix	2019-12-27	= 2242-222
CVE-2017-14444US	critical9.9	1.44% (73rd)	—	no fix	2018-08-02	= 1012
CVE-2017-16347US	critical9.9	1.38% (72nd)	—	no fix	2018-08-02	= 1012
CVE-2017-16346US	critical9.9	1.38% (72nd)	—	no fix	2018-08-02	= 1012
CVE-2017-16345US	critical9.9	1.38% (72nd)	—	no fix	2018-08-02	= 1012
CVE-2017-16344US	critical9.9	1.38% (72nd)	—	no fix	2018-08-02	= 1012
CVE-2017-16343US	critical9.9	1.36% (72nd)	—	no fix	2018-08-02	= 1012
CVE-2017-16342US	critical9.9	1.36% (72nd)	—	no fix	2018-08-02	= 1012
CVE-2017-16341US	critical9.9	1.36% (72nd)	—	no fix	2018-08-02	= 1012
CVE-2017-16340US	critical9.9	1.36% (72nd)	—	no fix	2018-08-02	= 1012
CVE-2017-16339US	critical9.9	1.36% (72nd)	—	no fix	2018-08-02	= 1012
CVE-2017-16338US	critical9.9	1.36% (72nd)	—	no fix	2018-08-02	= 1012
CVE-2017-14446US	critical9.9	1.29% (70th)	—	no fix	2018-08-02	= 1012
CVE-2017-14452US	high8.8	1.27% (70th)	—	no fix	2018-08-23	= 1012
CVE-2017-16255US	high8.1	1.22% (69th)	—	no fix	2019-03-21	= 1012
CVE-2017-16254US	high8.1	1.22% (69th)	—	no fix	2019-03-21	= 1012
CVE-2017-16252US	high8.1	1.20% (68th)	—	no fix	2018-08-06	= 1012
CVE-2017-14445US	critical9.9	1.12% (66th)	—	no fix	2018-08-02	= 1012
CVE-2017-14447US	high7.7	1.08% (65th)	—	no fix	2018-08-06	= 1012
CVE-2017-16253US	high8.1	1.08% (65th)	—	no fix	2019-03-21	= 1012
CVE-2017-16331US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16330US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16329US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16328US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16327US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16326US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16325US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16324US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16323US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16322US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16303US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16302US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16301US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16294US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16293US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16270US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16269US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16268US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16267US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16266US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16265US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16264US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16263US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16262US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16260US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16259US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16258US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16257US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16256US	critical9.9	0.86% (58th)	—	no fix	2023-01-11	= 1012
CVE-2017-16261US	high8.8	0.86% (58th)	—	no fix	2023-01-11	= 1012

showing 50 of 97

weaknesses (6)

The flaw types (CWEs) most of these CVEs share.

CWE-121Stack-based Buffer Overflow75 CVEs
CWE-787Out-of-bounds Write27 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')13 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-276Incorrect Default Permissions1 CVEs
CWE-346Origin Validation Error1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE97 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan