CVE-2017-2828

🗓️ 21 Jun 2017 13:00:00Reported by talosType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 75 Views🌐 WEB

Vulnerability in Foscam C1 Camera web management interface allowing command injection

Reporter	Title	Published	Views	Family All 11
CNVD	Foscam C1 Indoor HD Camera Command Injection Vulnerability (CNVD-2017-14362)	23 Jun 201700:00	–	cnvd
Cvelist	CVE-2017-2828	21 Jun 201713:00	–	cvelist
EUVD	EUVD-2017-11969	7 Oct 202500:30	–	euvd
NVD	CVE-2017-2828	21 Jun 201713:29	–	nvd
OSV	CVE-2017-2828	21 Jun 201713:29	–	osv
Prion	Command injection	21 Jun 201713:29	–	prion
Positive Technologies	PT-2017-15564	21 Jun 201700:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2017-2828: Improper Neutralization of Special Elements used in an OS Command	21 Jun 201700:00	–	rapid7
seebug.org	Foscam IP Video Camera CGIProxy.fcgi Account Password Command Injection Vulnerability(CVE-2017-2828)	15 Sep 201700:00	–	seebug
Talos	Foscam IP Video Camera CGIProxy.fcgi Account Password Command Injection Vulnerability	19 Jun 201700:00	–	talos

NVD

Node

AND

foscam c1_indoor_hd_camera_firmwareMatch2.52.2.37

foscam c1_indoor_hd_cameraMatch-

[
  {
    "product": "Indoor IP Camera C1 Series",
    "vendor": "Foscam",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/99184
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2017-0329

Parameter	Position	Path	Description	CWE
newPwd	query param	/cgi-bin/CGIProxy.fcgi	OS command injection in CGIProxy.fcgi changePassword handler; attacker can inject shell commands via the newPwd parameter in the changePassword request.	CWE-78

17 Jun 2026 01:16Current

8.9High risk

Vulners AI Score8.9

CVSS 26.5

CVSS 3.18.8

CVSS 38.8

EPSS0.0789

CWE-78

foscam c1 camera web management command injection vulnerability cve-2017-2828 nvd