Foscam camera firewall misconfiguration vulnerability

Foscam camera is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly through WIFI. There is a misconfiguration vulnerability in the Foscam camera firewall that allows an attacker to perform a brute force attack on credentials despite the presence of a...

Remote Command Injection Vulnerability at Foscam camera Add User

FOSCAM Group is a national high-tech enterprise specializing in the design, research and development, manufacturing and sales of network cameras, network video recorders and other products. Remote command injection vulnerability exists in the usrName parameter of the CGIProxy.fcgi addAccount...

Foscam camera RtspServer Denial of Service Vulnerability

Foscam camera is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly through WIFI. A denial of service vulnerability exists in Foscam camera RtspServer, where RtspServer crashes due to an out-of-memory read due to a negative number being incorrectly...

Foscam camera ONVIF SetHostname Stored Cross-Site Scripting Vulnerability

Foscam camera is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly via WIFI. A stored cross-site scripting vulnerability exists in Foscam camera ONVIF SetHostname. An unauthenticated attacker is able to trigger a persistent cross-site scripting attack...

Foscam camera remote command injection vulnerability

Foscam camera is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly through WIFI. Foscam camera has a remote command injection vulnerability in the modelName in the /mnt/mtd/app/config/ProductConfig.xml file. By installing the ProductConfig.xml file in...

Foscam camera ONVIF reboot vulnerability

FOSCAM Group is a national high-tech enterprise specializing in the design, research and development, manufacturing and sales of network cameras, network video recorders and other products. Foscam camera ONVIF has a reboot vulnerability that allows an unauthenticated attacker to reboot the device...

Foscam camera lacks multiple login restriction vulnerability

Foscam camera is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly through WIFI. Foscam camera lacks a multiple login restriction vulnerability, which can be exploited by an attacker to perform a strong attack on login credentials since the software...

Foscam camera FTP Server Account Empty Password Vulnerability

Foscam camera is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly through WIFI. Foscam camera FTP server has an account empty password vulnerability, due to the user account of the built-in FTP server is empty password. Attackers can then access the...

Foscam camera Web UI Account Non-Random Default Credentials Vulnerability

Foscam camera is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly through WIFI. A non-random default credentials vulnerability exists in the Foscam camera web user interface account. The device uses admin blank non-random default credentials to acces...

Hard-coded Passwords Make Hacking Foscam ‘IP Cameras’ Much Easier

Security researchers have discovered over a dozen of vulnerabilities in tens of thousands of web-connected cameras that can not be protected just by changing their default credentials. Vulnerabilities found in two models of IP cameras from China-based manufacturer Foscam allow attackers to take...

Hardcoded Credentials Vulnerability in Multiple Foscam Devices

Foscam is the world's leading provider of home security IP cameras. A security vulnerability exists in the use of the same hard-coded SSL private key for Foscam networked devices across different customer installations. A remote attacker could utilize another installation with knowledge of this k...

Hardcoded credentials

Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation...

CVE-2017-7648

Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation...

CVE-2017-7648

CVE-2017-7648 concerns Foscam networked devices that reuse the same hardcoded SSL private key across different installations. This root cause enables remote attackers to defeat cryptographic protections by leveraging the known key from another installation, potentially enabling eavesdropping, imp...

CVE-2017-7648

Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation...

Foscam Cameras And Network Devices Hardcoded Keys

Two issues in one that nullify SSL in foscam devices: All Foscam networked cameras use the same SSL private key that is hard coded into the downloadable firmware. This is easily extracted using a utility like binwalk and would allow an attacker to MITM any Foscam device. One devices SSL keys are...

Foscam Information Disclosure Vulnerability

Foscam is a smart webcam that allows for all-around monitoring of movement, sound, and temperature, and can push messages to your phone, as well as features such as mobile viewing and one-click sharing. Foscam suffers from an information disclosure vulnerability that allows an attacker to craft a...

Foscam Command Injection Vulnerability

Foscam is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly through WIFI. A command injection vulnerability exists in the Foscam mail.htm page that allows an attacker to inject a command into the Receiver1 field in a form that can be executed with roo...

Command injection

A command-injection vulnerability exists in a web application on a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models. The mail-sending form in the mail.htm page allows an attacker to inject a command into the receiver1 field in the form; it will b...

Cross site request forgery (csrf)

A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP "GET system.ini HTTP/1.1\n\n" - note the lack of "/" in the path field of the request request that will disclose the configuration...