Foscam IP Video Camera CGIProxy.fcgi SMTP Test Sender Parameter Configuration Command Injection Vulnerability(CVE-2017-2844)

Summary An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting...

CVE-2017-2844

Summary (CVE-2017-2844) : The Foscam C1 Indoor HD Camera web management CGIProxy.fcgi is vulnerable to a command-injection via the SMTP test flow. An authenticated administrator can inject data into the msmtprc configuration by sending a crafted HTTP request through the smtpTest command, leading ...