Lucene search

[email protected]CVE-2017-7648

HistoryOct 03, 2022 - 4:23 p.m.

CVE-2017-7648

2022-10-0316:23:00

CWE-798

[email protected]

web.nvd.nist.gov

foscam

ssl

security vulnerability

cve-2017-7648

cryptographic protection

hardcoded key

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.7%

JSON

Foscam networked devices use the same hardcoded SSL private key across different customers’ installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

Affected configurations

NVD

Node

foscamc1

foscamc1_lite

foscamc2

foscamfi9800xe

foscamfi9826p

foscamfi9828p

foscamfi9851p

foscamfi9853ep

foscamfi9901ep

foscamfi9903p

foscamfi9928p

foscamr2

CPENameOperatorVersion
foscam:c1foscam c1eq*
foscam:c1_litefoscam c1 liteeq*
foscam:c2foscam c2eq*
foscam:fi9800xefoscam fi9800xeeq*
foscam:fi9826pfoscam fi9826peq*
foscam:fi9828pfoscam fi9828peq*
foscam:fi9851pfoscam fi9851peq*
foscam:fi9853epfoscam fi9853epeq*
foscam:fi9901epfoscam fi9901epeq*
foscam:fi9903pfoscam fi9903peq*

CPE	Name	Operator	Version
foscam:c1	foscam c1	eq	*
foscam:c1_lite	foscam c1 lite	eq	*
foscam:c2	foscam c2	eq	*
foscam:fi9800xe	foscam fi9800xe	eq	*
foscam:fi9826p	foscam fi9826p	eq	*
foscam:fi9828p	foscam fi9828p	eq	*
foscam:fi9851p	foscam fi9851p	eq	*
foscam:fi9853ep	foscam fi9853ep	eq	*
foscam:fi9901ep	foscam fi9901ep	eq	*
foscam:fi9903p	foscam fi9903p	eq	*

Rows per page:

1-10 of 121

References

www.securityfocus.com/archive/1/540388/30/0/threaded

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.7%

JSON

Related for CVE-2017-7648

prion1 nvd1 cvelist1