CVE-2017-2841
HighSummary
A command injection vulnerability exists in the web management interface of the Foscam C1 Indoor HD Camera. A specially crafted HTTP request can allow an attacker to inject arbitrary data into the 'msmtprc' configuration file, leading to command execution.
Risk Assessment
This vulnerability could allow an attacker to execute commands remotely on the device, posing a significant threat to the security of the organization's network and data.
Recommendation
It is recommended to update the camera's firmware to the latest version to mitigate this vulnerability and restrict access to the management interface to trusted users.
Other vulnerabilities in Foscam C1 Indoor HD Camera, firmware 2.52.2.37
Original NVD description (English source)
An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability.