Skip to content
OpenAdvisories
Critical · 9.8 CVE-2017-2877 EUVD-2017-12018GHSA-98wp-25ph-mf7r

A missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A…

Published Sep 19, 2018 · Updated Sep 17, 2024 · Assigned by talos

Description

A missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10001 could allow an attacker to reset the user accounts to factory defaults, without authentication.

Affected products

VendorProductAffectedFixed
Foscam Foscam C1 Indoor HD Camera Foscam Indoor IP Camera C1 Series,System Firmware Version: 1.9.3.18,Application Firmware Version: 2.52.2.43,Plug-In Version: 3.3.0.26 —

References