EUVD-2017-12016

Malware in sbrugna...

Buffer overflow

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an...

PT-2018-7207

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: A buffer overflow issue exists in the DDNS client of the affected device. When DDNS is enabled, an attacker who can intercept HTTP connections may fully compromise the device by settin...

PT-2018-7220

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: A buffer overflow issue exists in the Multi-Camera interface of the affected device. This can be triggered by a specially crafted request on port 10000, potentially allowing arbitrary...

PT-2018-7218

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: A command injection issue exists in the web management interface of the affected device. It can be triggered by sending a specially crafted HTTP request, allowing an attacker to inject...

PT-2018-7223

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: A buffer overflow issue exists in the web management interface of the affected device. It can be triggered by a specially crafted HTTP request, potentially allowing an attacker to...

PT-2018-7222

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: A missing error check in the Multi-Camera interface allows an attacker to reset user accounts to factory defaults without authentication by sending a specially crafted request on port...

PT-2018-7224

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: A buffer overflow issue exists in the UPnP implementation. It can be triggered by a specially crafted UPnP discovery response, potentially allowing an attacker to overwrite arbitrary...

PT-2018-7221

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: A buffer overflow issue exists in the Multi-Camera interface of the affected device. This can be triggered by a specially crafted request on port 10000, potentially allowing arbitrary...

CVE-2017-2878: Buffer Copy without Checking Size of Input

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an...

CVE-2017-2855: Buffer Copy without Checking Size of Input

An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue...

CVE-2017-2876: Buffer Copy without Checking Size of Input

An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10000 can cause a buffer overflow resulting in overwriting arbitrary data...

CVE-2017-2879: Buffer Copy without Checking Size of Input

An exploitable buffer overflow vulnerability exists in the UPnP implementation used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted UPnP discovery response can cause a buffer overflow resulting in overwriting arbitrary data. An attacker needs to be in...

CVE-2017-2875: Buffer Copy without Checking Size of Input

An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10000 can cause a buffer overflow resulting in overwriting arbitrary data...

CVE-2017-2877: Improper Handling of Exceptional Conditions

A missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10001 could allow an attacker to reset the user accounts to factory defaults, without authentication...

CVE-2017-2873: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SoftAP configuration resulting...

CVE-2017-2857

An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue...

PT-2018-7208

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: A buffer overflow issue exists in the DDNS client of the affected device. When DDNS is enabled, an attacker intercepting HTTP connections can fully compromise the device by setting up ...

PT-2018-7219

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: An information disclosure issue exists in the Multi-Camera interface. A specially crafted request on port 10001 can allow a user to retrieve sensitive information without authenticatio...

PT-2018-7209

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: A buffer overflow issue exists in the DDNS client of the Foscam C1 Indoor HD Camera. When DDNS is enabled, an attacker who can intercept HTTP connections can fully compromise the devic...