Lucene search
+L

CVE-2017-2857

🗓️ 17 Sep 2018 20:00:00Reported by talosType 
cve
 cve
🔗 web.nvd.nist.gov👁 96 Views🌐 WEB

An exploitable buffer overflow vulnerability in Foscam C1 Camera with DDNS client

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2017-2857
18 Sep 201800:18
–circl
cnvd
CNVD
Foscam C1 Indoor HD Camera DDNS Client Buffer Overflow Vulnerability (CNVD-2017-34263)
15 Nov 201700:00
–cnvd
cvelist
Cvelist
CVE-2017-2857
17 Sep 201820:00
–cvelist
euvd
EUVD
EUVD-2017-11998
7 Oct 202500:30
–euvd
nvd
NVD
CVE-2017-2857
17 Sep 201820:29
–nvd
osv
OSV
CVE-2017-2857
17 Sep 201820:29
–osv
prion
Prion
Buffer overflow
17 Sep 201820:29
–prion
ptsecurity
Positive Technologies
PT-2018-7209
17 Sep 201800:00
–ptsecurity
rapid7
Rapid7 Vulnerability Database (full)
CVE-2017-2857: Buffer Copy without Checking Size of Input
17 Sep 201800:00
–rapid7
seebug
seebug.org
Foscam IP Video Camera webService 9299.org DDNS Client Code Execution Vulnerability(CVE-2017-2857)
14 Nov 201700:00
–seebug
Rows per page
NVD
Vulners
Node
AND
foscamc1_firmwareMatch2.52.2.43
foscamc1Match-
[
  {
    "product": "Foscam Indoor IP Camera C1 Series",
    "vendor": "Foscam",
    "versions": [
      {
        "status": "affected",
        "version": "System Firmware Version: 1.9.3.18,Application Firmware Version: 2.52.2.43,Plug-In Version: 3.3.0.26"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
usrquery paramcgi-bin/CGIProxy.fcgi?usr=admin&pwd=&cmd=setDDNSConfig&isEnable=1&hostName=x&ddnsServer=5&user=x&password=xBuffer overflow in DDNS client when parsing the HTTP response from a rogue DDNS server (ddnsServer=5) after configuring DDNS via CGIProxy.fcgi, leading to potential code execution or device compromise.CWE-120
pwdquery paramcgi-bin/CGIProxy.fcgi?usr=admin&pwd=&cmd=setDDNSConfig&isEnable=1&hostName=x&ddnsServer=5&user=x&password=xBuffer overflow in DDNS client when parsing the HTTP response from a rogue DDNS server (ddnsServer=5) after configuring DDNS via CGIProxy.fcgi, leading to potential code execution or device compromise.CWE-120
cmdquery paramcgi-bin/CGIProxy.fcgi?usr=admin&pwd=&cmd=setDDNSConfig&isEnable=1&hostName=x&ddnsServer=5&user=x&password=xBuffer overflow in DDNS client when parsing the HTTP response from a rogue DDNS server (ddnsServer=5) after configuring DDNS via CGIProxy.fcgi, leading to potential code execution or device compromise.CWE-120
isEnablequery paramcgi-bin/CGIProxy.fcgi?usr=admin&pwd=&cmd=setDDNSConfig&isEnable=1&hostName=x&ddnsServer=5&user=x&password=xBuffer overflow in DDNS client when parsing the HTTP response from a rogue DDNS server (ddnsServer=5) after configuring DDNS via CGIProxy.fcgi, leading to potential code execution or device compromise.CWE-120
hostNamequery paramcgi-bin/CGIProxy.fcgi?usr=admin&pwd=&cmd=setDDNSConfig&isEnable=1&hostName=x&ddnsServer=5&user=x&password=xBuffer overflow in DDNS client when parsing the HTTP response from a rogue DDNS server (ddnsServer=5) after configuring DDNS via CGIProxy.fcgi, leading to potential code execution or device compromise.CWE-120
ddnsServerquery paramcgi-bin/CGIProxy.fcgi?usr=admin&pwd=&cmd=setDDNSConfig&isEnable=1&hostName=x&ddnsServer=5&user=x&password=xBuffer overflow in DDNS client when parsing the HTTP response from a rogue DDNS server (ddnsServer=5) after configuring DDNS via CGIProxy.fcgi, leading to potential code execution or device compromise.CWE-120
userquery paramcgi-bin/CGIProxy.fcgi?usr=admin&pwd=&cmd=setDDNSConfig&isEnable=1&hostName=x&ddnsServer=5&user=x&password=xBuffer overflow in DDNS client when parsing the HTTP response from a rogue DDNS server (ddnsServer=5) after configuring DDNS via CGIProxy.fcgi, leading to potential code execution or device compromise.CWE-120
passwordquery paramcgi-bin/CGIProxy.fcgi?usr=admin&pwd=&cmd=setDDNSConfig&isEnable=1&hostName=x&ddnsServer=5&user=x&password=xBuffer overflow in DDNS client when parsing the HTTP response from a rogue DDNS server (ddnsServer=5) after configuring DDNS via CGIProxy.fcgi, leading to potential code execution or device compromise.CWE-120

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 01:17Current
8.1High risk
Vulners AI Score8.1
CVSS 3.18.1
CVSS 29.3
CVSS 38.1
EPSS0.0166
96