CVE-2017-2854

🗓️ 17 Sep 2018 20:00:00Reported by talosType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 60 Views🌐 WEB

An exploitable buffer overflow vulnerability in Foscam C1 Indoor HD Camera's DDNS client

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2017-2854	18 Sep 201800:18	–	circl
CNVD	Foscam C1 Indoor HD Camera DDNS Client Buffer Overflow Vulnerability	15 Nov 201700:00	–	cnvd
Cvelist	CVE-2017-2854	17 Sep 201820:00	–	cvelist
EUVD	EUVD-2017-11995	7 Oct 202500:30	–	euvd
NVD	CVE-2017-2854	17 Sep 201820:29	–	nvd
Prion	Buffer overflow	17 Sep 201820:29	–	prion
seebug.org	Foscam IP Video Camera webService oray.com DDNS Client Code Execution Vulnerability(CVE-2017-2854)	14 Nov 201700:00	–	seebug
Talos	Foscam IP Video Camera webService oray.com DDNS Client Code Execution Vulnerability	13 Nov 201700:00	–	talos
Talos Blog	Vulnerability Spotlight: Multiple Vulnerabilities in Foscam C1 Indoor HD Cameras	13 Nov 201707:43	–	talosblog

NVD

Vulners

Node

foscam c1_firmwareMatch2.52.2.43

AND

foscam c1Match-

[
  {
    "product": "Foscam Indoor IP Camera C1 Series",
    "vendor": "Foscam",
    "versions": [
      {
        "status": "affected",
        "version": "System Firmware Version: 1.9.3.18,Application Firmware Version: 2.52.2.43,Plug-In Version: 3.3.0.26"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2017-0357

Parameter	Position	Path	Description	CWE
usr	query param	/cgi-bin/CGIProxy.fcgi?usr=${sUsr}&pwd=${sPwd}&cmd=setDDNSConfig&isEnable=1&hostName=x&ddnsServer=1&user=x&password=x	Exploitable buffer overflow in the DDNS client invoked via CGIProxy.fcgi when configuring DDNS, allowing an attacker to serve a malicious response and crash/compromise the device.	CWE-120
pwd	query param	/cgi-bin/CGIProxy.fcgi?usr=${sUsr}&pwd=${sPwd}&cmd=setDDNSConfig&isEnable=1&hostName=x&ddnsServer=1&user=x&password=x	Exploitable buffer overflow in the DDNS client invoked via CGIProxy.fcgi when configuring DDNS, allowing an attacker to serve a malicious response and crash/compromise the device.	CWE-120
cmd	query param	/cgi-bin/CGIProxy.fcgi?usr=${sUsr}&pwd=${sPwd}&cmd=setDDNSConfig&isEnable=1&hostName=x&ddnsServer=1&user=x&password=x	Exploitable buffer overflow in the DDNS client invoked via CGIProxy.fcgi when configuring DDNS, allowing an attacker to serve a malicious response and crash/compromise the device.	CWE-120
isEnable	query param	/cgi-bin/CGIProxy.fcgi?usr=${sUsr}&pwd=${sPwd}&cmd=setDDNSConfig&isEnable=1&hostName=x&ddnsServer=1&user=x&password=x	Exploitable buffer overflow in the DDNS client invoked via CGIProxy.fcgi when configuring DDNS, allowing an attacker to serve a malicious response and crash/compromise the device.	CWE-120
hostName	query param	/cgi-bin/CGIProxy.fcgi?usr=${sUsr}&pwd=${sPwd}&cmd=setDDNSConfig&isEnable=1&hostName=x&ddnsServer=1&user=x&password=x	Exploitable buffer overflow in the DDNS client invoked via CGIProxy.fcgi when configuring DDNS, allowing an attacker to serve a malicious response and crash/compromise the device.	CWE-120
ddnsServer	query param	/cgi-bin/CGIProxy.fcgi?usr=${sUsr}&pwd=${sPwd}&cmd=setDDNSConfig&isEnable=1&hostName=x&ddnsServer=1&user=x&password=x	Exploitable buffer overflow in the DDNS client invoked via CGIProxy.fcgi when configuring DDNS, allowing an attacker to serve a malicious response and crash/compromise the device.	CWE-120
user	query param	/cgi-bin/CGIProxy.fcgi?usr=${sUsr}&pwd=${sPwd}&cmd=setDDNSConfig&isEnable=1&hostName=x&ddnsServer=1&user=x&password=x	Exploitable buffer overflow in the DDNS client invoked via CGIProxy.fcgi when configuring DDNS, allowing an attacker to serve a malicious response and crash/compromise the device.	CWE-120
password	query param	/cgi-bin/CGIProxy.fcgi?usr=${sUsr}&pwd=${sPwd}&cmd=setDDNSConfig&isEnable=1&hostName=x&ddnsServer=1&user=x&password=x	Exploitable buffer overflow in the DDNS client invoked via CGIProxy.fcgi when configuring DDNS, allowing an attacker to serve a malicious response and crash/compromise the device.	CWE-120

21 Nov 2024 03:24Current

8.1High risk

Vulners AI Score8.1

CVSS 3.18.1

CVSS 29.3

CVSS 38.1

EPSS0.004

CWE-120