CVE-2016-8731
CriticalSummary
The Foscam C1 firmware version 1.9.1.12 contains hard-coded FTP credentials (r:r). Knowledge of these credentials allows remote access to any cameras found on the internet that do not have port 50021 blocked by an intermediate device.
Risk Assessment
The organization is exposed to unauthorized access to cameras, which may lead to privacy breaches and data loss. Cameras could be used for spying or other criminal activities.
Recommendation
It is recommended to block port 50021 on intermediate devices and update the camera firmware to the latest version to remove the hard-coded credentials.
Original NVD description (English source)
Hard-coded FTP credentials (r:r) are included in the Foscam C1 running firmware 1.9.1.12. Knowledge of these credentials would allow remote access to any cameras found on the internet that do not have port 50021 blocked by an intermediate device.