Skip to content
OpenAdvisories
High · 8.8 CVE-2017-2845 EUVD-2017-11986GHSA-h226-vp2c-grvg

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applic…

Published Jun 29, 2017 · Updated Sep 16, 2024 · Assigned by talos

Description

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SMTP configuration tests resulting in command execution

Affected products

VendorProductAffectedFixed
Foscam Indoor IP Camera C1 Series — —

References