CVE-2017-18377

creationtimestamp| type| source ---|---|--- 2019-06-12 00:30:26+00:00| published-proof-of-concept| https://t.me/cibsecurity/4848 2020-10-15 15:07:03+00:00| seen| MISP/cbd9bbb3-3f53-4610-9d91-9191ff0a9ca8 2020-10-16 06:56:57+00:00| seen| MISP/25aef508-b116-4d75-84b2-b6ceff906e44 2026-07-16...

CVE-2017-18377

A Command Injection vulnerability exists in the set_ftp.cgi script of Wireless IP Camera (P2P) WIFICAM cameras . The flaw is caused by improper neutralization of shell metacharacters in the pwd variable, which can be triggered via a specific URI (e.g., set_ftp.cgi?svr=192.168.1.1&port=21&user=ftp...