CVE-2017-2828
HighSummary
A command injection vulnerability exists in the web management interface of the Foscam C1 Indoor HD Camera that can be exploited by an attacker. A specially crafted HTTP request allows for the injection of arbitrary shell characters during account creation.
Risk Assessment
An attacker can exploit this vulnerability to execute arbitrary commands on the device, potentially leading to full control over the camera. This poses a significant risk to network security and user data.
Recommendation
It is recommended to update the camera firmware to the latest version to mitigate this vulnerability. Additionally, access to the management interface should be restricted to trusted users.
Other vulnerabilities in Foscam C1 Indoor HD Camera, firmware version 2.52.2.37
See all- CVE-2017-2845High
A command injection vulnerability exists in the web management interface of the Foscam C1 Indoor HD Camera. A specially crafted HTTP request can allow an attacker to inject arbitrary shell characters during SMTP configuration tests, leading to command execution.
- CVE-2017-2827High
A command injection vulnerability exists in the web management interface of the Foscam C1 Indoor HD Camera. A specially crafted HTTP request allows an attacker to inject arbitrary shell characters during account creation.
Original NVD description (English source)
An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability.