Description
Foscam Video Management System 1.1.4.9 contains a denial of service vulnerability in the username input field that allows attackers to crash the application. Attackers can overwrite the username with a 520-byte buffer of repeated 'A' characters to trigger an application crash during device login.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Diy Security SL | Foscam Video Management System | 1.1.4.9 | — |
References
- ExploitDB-47671 exploit
- Foscam Official Homepage product
- VulnCheck Advisory: Foscam Video Management System 1.1.4.9 - 'Username' Denial of Service third-party-advisory