← Vulnerability feed
Start free
Open in platform
Vulnerability record · CVE-2013-4859 · published 27 December 2019
CVE-2013-4859: Insteon hub firmware incorrect default permissions vulnerability
Insteon · Hub Firmware
INSTEON Hub 2242-222 lacks Web and API authentication
8.1 CVSS 3.1 High EPSS 7.0% · top 6.1% CWE-276 · Incorrect default permissions
8.1CVSS 3.1 base score, v2 9.3
7.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 2 tagged exploit
16 Jun 2026Last modified by NVD
Description
INSTEON Hub 2242-222 lacks Web and API authentication
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://www.exploit-db.com/exploits/27284 | ExploitThird Party AdvisoryVDB Entry |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/86196 | VDB Entry |
| http://www.exploit-db.com/exploits/27284 | ExploitThird Party AdvisoryVDB Entry |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/86196 | VDB Entry |
Track CVE-2013-4859 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
9.9CVE-2017-16322Insteon hub firmware stack-based buffer overflow vulnerabilityMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version…EPSS 0.85%9.9CVE-2017-16323Insteon hub firmware stack-based buffer overflow vulnerabilityMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version…EPSS 0.85%9.9CVE-2017-16324Insteon hub firmware stack-based buffer overflow vulnerabilityMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version…EPSS 0.85%9.9CVE-2017-16325Insteon hub firmware stack-based buffer overflow vulnerabilityMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version…EPSS 0.85%9.9CVE-2017-16326Insteon hub firmware stack-based buffer overflow vulnerabilityMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version…EPSS 0.85%9.9CVE-2017-16327Insteon hub firmware stack-based buffer overflow vulnerabilityMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version…EPSS 0.85%9.9CVE-2017-16328Insteon hub firmware stack-based buffer overflow vulnerabilityMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version…EPSS 0.85%9.9CVE-2017-16329Insteon hub firmware stack-based buffer overflow vulnerabilityMultiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version…EPSS 0.85%
Source: NIST National Vulnerability Database (record CVE-2013-4859), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
