CVE-2017-2843
HighSummary
In the web management interface of the Foscam C1 Indoor HD Camera running application firmware version 2.52.2.37, a specially crafted HTTP request can allow a user to inject arbitrary data into the 'msmtprc' configuration file, resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
Risk Assessment
This vulnerability may lead to remote code execution, posing a serious threat to the security of the device and the network it resides in. An attacker could gain full control over the camera, potentially resulting in privacy violations.
Recommendation
It is recommended to update the camera's firmware to the latest version to mitigate this vulnerability. Additionally, access to the management interface should be restricted to trusted IP addresses.
Other vulnerabilities in Foscam C1 Indoor HD Camera
See all- CVE-2017-2830High
A buffer overflow vulnerability exists in the web management interface of the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data.
- CVE-2017-2805Critical
A stack-based buffer overflow vulnerability exists in the web management interface of the Foscam C1 Indoor HD Camera. A specially crafted HTTP request can cause a buffer overflow, resulting in overwriting arbitrary data on the stack frame.
Original NVD description (English source)
In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability.