Foscam IP Video Camera CGIProxy.fcgi SMTP Test Command Injection Vulnerability(CVE-2017-2845)

Summary An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SMTP configuration tes...

CVE-2017-2845

Summary: CVE-2017-2845 is a command-injection flaw in Foscam C1 C1 Indoor HD Camera’s CGIProxy.fcgi SMTP Test path. An attacker with admin access can craft an SMTP Test request (smtpTest) to inject OS commands via the SMTP host parameter, potentially achieving code execution. Affected firmware: 2...