Schneider Electric Pelco Sarix/Spectra Cameras CSRF Enable SSH Root Access Vulnerability

Pelco IP cameras suffer from a cross site request forgery vulnerability. The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileg...

Schneider Electric Pelco Sarix/Spectra Cameras CSRF Enable SSH Root Access

Summary Pelco offers the broadest selection of IP cameras designed for security surveillance in a wide variety of commercial and industrial settings. From our industry-leading fixed and high-speed IP cameras to panoramic, thermal imaging, explosionproof and more, we offer a camera for any...

Foscam IP Video Camera Command Injection Vulnerability(CVE-2017-2847)

Summary An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during manual network configurati...

Foscam C1 Indoor HD Camera cgiproxy.fcgi -DNS1.address configuration command injection vulnerability

Foscam C1 Indoor HD Camera is a wireless HD IP camera from Foscam China. A security vulnerability exists in the web management interface in the Foscam C1 Indoor HD Camera using application firmware version 2.52.2.37. The vulnerability can be exploited to inject arbitrary shell characters by sendi...

Foscam C1 Indoor HD Camera Command Injection Vulnerability (CNVD-2017-14064)

Foscam C1 Indoor HD Camera is a wireless HD IP camera from Foscam China. A security vulnerability exists in the web management interface in the Foscam C1 Indoor HD Camera using application firmware version 2.52.2.37. The vulnerability can be exploited to inject arbitrary shell characters by sendi...

Foscam C1 Indoor HD Camera Buffer Overflow Vulnerability (CNVD-2017-14066)

Foscam C1 Indoor HD Camera is a wireless HD IP camera from Foscam China. A buffer overflow vulnerability exists in the web management interface in the Foscam C1 Indoor HD Camera using application firmware version 2.52.2.37. An attacker can exploit the vulnerability by sending a specially crafted...

The vulnerability of the Android operating system’s camera allows a intruder to gain access to memory areas beyond the boundaries of the application.

The vulnerability of the Android operating system’s camera is due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to memory areas that are outside the application’s boundaries...

Foscam Indoor IP Camera C1 Series Command Injection Vulnerability

Foscam Indoor IP Camera C1 Series is a C1 series wireless IP camera product from Foscam China. A security vulnerability exists in the web management interface of the Foscam Indoor IP Camera C1 Series using the 2.52.2.37 application firmware. The vulnerability can be exploited to inject arbitrary...

The vulnerability of the Android operating system’s camera, allowing a intruder to compromise the confidentiality of information

The vulnerability of the Android operating system’s camera is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality of information...

CVE-2017-2849

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during NTP server configuration resulting in command injection. An attacker can simply send an HTTP reques...

CVE-2017-2850

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary characters in the pureftpd.passwd file during a username change, which in turn allows for bypassing chroot restrictions in...

CVE-2017-2846

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during manual network configuration resulting in command injection. An attacker can simply send an HTTP...

CVE-2017-2848

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during manual network configuration resulting in command injection. An attacker can simply send an HTTP...

CVE-2017-2851

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can cause a buffer overflow...

CVE-2017-2845

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SMTP configuration tests...

CVE-2017-2846

CVE-2017-2846 affects Foscam C1 Indoor HD Camera (web CGIProxy.fcgi). A command injection is achievable via the setIpInfo input when configuring networking: an attacker with admin access can inject shell commands through gateway/address fields, leading to remote code execution on the device. The ...

CVE-2017-2848

The CVE-2017-2848 issue affects Foscam C1 Indoor HD Cameras (CGIProxy.fcgi). A crafted setIpInfo request can inject arbitrary OS commands via the DNS2 parameter (and other networking fields). The exploit path involves feeding unvalidated input into shell commands (e.g., dns2 + attacker-controlled...

CVE-2017-2849

CVE-2017-2849 affects Foscam C1 Indoor HD Camera (application firmware 2.52.2.37). The web CGI interface (CGIProxy.fcgi) passes ntpServer from the user query to a shell via popen without proper sanitization, enabling command injection through a crafted NTP server value. The exploit can be deliver...

CVE-2017-2850

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary characters in the pureftpd.passwd file during a username change, which in turn allows for bypassing chroot restrictions in...

CVE-2017-2851

CVE-2017-2851 affects the Foscam C1 Indoor HD Camera web CGIProxy.fcgi. A buffer overflow in setWifiSetting is caused by unbounded copying of the comma-separated psk string into a 0x100-sized buffer, enabling an attacker with admin access (privilege 2) to overwrite saved registers (e.g., R4) and ...