CVE-2017-2842
HighSummary
In the web management interface of the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow a user to inject arbitrary data into the 'msmtprc' configuration file, resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
Risk Assessment
This vulnerability can lead to remote code execution, posing a serious threat to the security of the device and the network it resides in. An attacker could gain full control over the camera.
Recommendation
It is recommended to update the camera firmware to the latest version to mitigate this vulnerability. Additionally, access to the management interface should be restricted to trusted IP addresses.
Other vulnerabilities in Foscam C1 Indoor HD Camera, firmware 2.52.2.37
Original NVD description (English source)
In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability.