CVE-2017-2855

The CVE describes a buffer overflow in the Foscam C1 Indoor HD Camera’s DDNS client when configured with supported DDNS providers (e.g., 3322.net). The exploit chain relies on the device periodically contacting the configured DDNS server, parsing the response, and locating an IP address after a "...

CVE-2017-2875

CVE-2017-2875 affects Foscam C1 Indoor HD Camera (firmware 2.52.2.43). The vulnerability resides in the devMng Multi-Camera port 10000 command 0x0002 handling, where lack of bounds checking on the username field can cause a buffer overflow, enabling remote code execution. The described exploit pa...

CVE-2017-2879

CVE-2017-2879 is a UPnP discovery buffer overflow in the Foscam C1 Indoor HD Camera’s UPnP webService. A crafted UDP response to a discovery request can overflow a stack/buffer, overwriting data and crashing the web service (PoC shows a 200 OK http://… payload triggering a crash). Affected firmwa...

CVE-2017-2878

CVE-2017-2878 affects the Foscam C1 Indoor HD Camera web management interface. The issue is a buffer overflow in the CGIProxy.fcgi logOut path: a user-supplied username (buffer size up to 0x40) is copied into a 0x20-byte field via strcpy, allowing an attacker—requiring at least a visitor-privileg...

CVE-2017-2855

An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue...

CVE-2017-2879

An exploitable buffer overflow vulnerability exists in the UPnP implementation used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted UPnP discovery response can cause a buffer overflow resulting in overwriting arbitrary data. An attacker needs to be in...

CVE-2017-2878

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an...

CVE-2017-2873: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SoftAP configuration resulting...

PT-2018-7223

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: A buffer overflow issue exists in the web management interface of the affected device. It can be triggered by a specially crafted HTTP request, potentially allowing an attacker to...

PT-2018-7207

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: A buffer overflow issue exists in the DDNS client of the affected device. When DDNS is enabled, an attacker who can intercept HTTP connections may fully compromise the device by settin...

PT-2018-7218

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: A command injection issue exists in the web management interface of the affected device. It can be triggered by sending a specially crafted HTTP request, allowing an attacker to inject...

PT-2018-7220

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: A buffer overflow issue exists in the Multi-Camera interface of the affected device. This can be triggered by a specially crafted request on port 10000, potentially allowing arbitrary...

PT-2018-7222

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: A missing error check in the Multi-Camera interface allows an attacker to reset user accounts to factory defaults without authentication by sending a specially crafted request on port...

PT-2018-7221

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: A buffer overflow issue exists in the Multi-Camera interface of the affected device. This can be triggered by a specially crafted request on port 10000, potentially allowing arbitrary...

CVE-2017-2878: Buffer Copy without Checking Size of Input

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an...

CVE-2017-2879: Buffer Copy without Checking Size of Input

An exploitable buffer overflow vulnerability exists in the UPnP implementation used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted UPnP discovery response can cause a buffer overflow resulting in overwriting arbitrary data. An attacker needs to be in...

CVE-2017-2855: Buffer Copy without Checking Size of Input

An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue...

CVE-2017-2876: Buffer Copy without Checking Size of Input

An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10000 can cause a buffer overflow resulting in overwriting arbitrary data...

CVE-2017-2877: Improper Handling of Exceptional Conditions

A missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10001 could allow an attacker to reset the user accounts to factory defaults, without authentication...

PT-2018-7224

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: A buffer overflow issue exists in the UPnP implementation. It can be triggered by a specially crafted UPnP discovery response, potentially allowing an attacker to overwrite arbitrary...