CVE-2017-5674

Critical

Published: 13/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP request that discloses the configuration file with the login password.

Risk Assessment

An attacker could gain access to sensitive information, potentially leading to unauthorized access to user systems and data.

Recommendation

It is recommended to update the server software and implement appropriate security measures to minimize the risk of data exposure.

Original NVD description (English source)

A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP ("GET system.ini HTTP/1.1\n\n" - note the lack of "/" in the path field of the request) request that will disclose the configuration file with the login password.