Skip to content
OpenAdvisories
High · 7.5 CVE-2017-2874 EUVD-2017-12015GHSA-j5ph-qf4x-g7h7

An information disclosure vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application fir…

Published Sep 17, 2018 · Updated Sep 17, 2024 · Assigned by talos

Description

An information disclosure vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10001 can allow for a user to retrieve sensitive information without authentication.

Affected products

VendorProductAffectedFixed
Foscam Foscam Indoor IP Camera C1 Series System Firmware Version: 1.9.3.18,Application Firmware Version: 2.52.2.43,Plug-In Version: 3.3.0.26 —

References