CVE-2017-2845
HighSummary
A command injection vulnerability exists in the web management interface of the Foscam C1 Indoor HD Camera. A specially crafted HTTP request can allow an attacker to inject arbitrary shell characters during SMTP configuration tests, leading to command execution.
Risk Assessment
This vulnerability could allow unauthorized command execution on the device, posing a significant threat to the security of the organization's network and data.
Recommendation
It is recommended to update the camera firmware to the latest version to mitigate this vulnerability and restrict access to the management interface to trusted users.
Other vulnerabilities in Foscam C1 Indoor HD Camera, firmware version 2.52.2.37
See all- CVE-2017-2828High
A command injection vulnerability exists in the web management interface of the Foscam C1 Indoor HD Camera that can be exploited by an attacker. A specially crafted HTTP request allows for the injection of arbitrary shell characters during account creation.
- CVE-2017-2827High
A command injection vulnerability exists in the web management interface of the Foscam C1 Indoor HD Camera. A specially crafted HTTP request allows an attacker to inject arbitrary shell characters during account creation.
Original NVD description (English source)
An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SMTP configuration tests resulting in command execution