CVE-2017-2842

In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An attacker can simply send an HTTP request to t...

CVE-2017-2843

In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An attacker can simply send an HTTP request to t...

CVE-2017-2842

The CVE-2017-2842 issue affects Foscam C1 Indoor HD Camera (firmware 2.52.2.37) via CGIProxy.fcgi. A crafted smtpTest request lets an attacker inject data into msmtprc, enabling command execution (via passwordeval). PoC shows admin-authenticated remote trigger; exploit leverages injection in SMTP...

CVE-2017-2841

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in...

CVE-2017-2841

The CVE-2017-2841 issue affects Foscam C1 Indoor HD Camera (firmware 2.52.2.37). A command-injection flaw exists in CGIProxy.fcgi via the SMTP Test parameter (smtpTest), which writes unsanitized data into the msmtprc config and can trigger arbitrary OS commands. The chain enables code execution t...

Foscam C1 Hardcoded FTP Credentials (CVE-2016-8731)

Binary data 700147.prm...

Foscam C1 Hardcoded FTP Credentials (CVE-2016-8731)

Binary data 700146.prm...

Foscam C1 Indoor HD Camera Buffer Overflow Vulnerability

Foscam C1 Indoor HD Camera is a wireless HD IP camera from Foscam China. A buffer overflow vulnerability exists in the web management interface in the Foscam C1 Indoor HD Camera using application firmware version 2.52.2.37. An attacker can exploit the vulnerability by sending an HTTP request to t...

Foscam C1 Indoor HD Camera Path Traversal Vulnerability

Foscam C1 Indoor HD Camera is a wireless HD IP camera from Foscam China. A path traversal vulnerability exists in the web management interface in the Foscam C1 Indoor HD Camera using application firmware version 2.52.2.37. An attacker can exploit the vulnerability by sending an HTTP request to th...

Foscam C1 Indoor HD Camera Command Injection Vulnerability

Foscam C1 Indoor HD Camera is a wireless HD IP camera from Foscam China. A command injection vulnerability exists in the web management interface in the Foscam C1 Indoor HD Camera using application firmware version 2.52.2.37. An attacker can exploit the vulnerability by sending an HTTP request to...

Foscam C1 Indoor HD Camera Command Injection Vulnerability (CNVD-2017-14362)

Foscam C1 Indoor HD Camera is a wireless HD IP camera from Foscam China. A command injection vulnerability exists in the web management interface in the Foscam C1 Indoor HD Camera using application firmware version 2.52.2.37. An attacker can exploit the vulnerability by sending an HTTP request to...

Foscam C1 Hardcoded Credential Authentication Bypass Vulnerability

Foscam C1 is a wireless IP camera product from FOSCAM China. A security vulnerability exists in the Foscam C1 using firmware version 1.9.1.12. The vulnerability can be exploited by a remote attacker to access a camera that does not block port 50021...

Foscam IP Video Camera Stack Buffer Overflow Vulnerability

Foscam IP Video Camera is a wireless HD IP camera from Foscam China. A stack buffer overflow vulnerability exists in the web management interface in the Foscam IP Video Camera. An attacker can exploit this vulnerability by sending an HTTP request to the device to overwrite data on an arbitrary...

Foscam IP Video Camera Buffer Overflow Vulnerability

Foscam IP Video Camera is a wireless HD IP camera from Foscam China. A buffer overflow vulnerability exists in the web management interface in Foscam IP Video Camera using application firmware version 2.52.2.37. An attacker can exploit the vulnerability by sending an HTTP request to the device to...

Hardcoded credentials

Hard-coded FTP credentials r:r are included in the Foscam C1 running firmware 1.9.1.12. Knowledge of these credentials would allow remote access to any cameras found on the internet that do not have port 50021 blocked by an intermediate device...

CVE-2016-8731

Hard-coded FTP credentials r:r are included in the Foscam C1 running firmware 1.9.1.12. Knowledge of these credentials would allow remote access to any cameras found on the internet that do not have port 50021 blocked by an intermediate device...

CVE-2016-8731

Hard-coded FTP credentials r:r are included in the Foscam C1 running firmware 1.9.1.12. Knowledge of these credentials would allow remote access to any cameras found on the internet that do not have port 50021 blocked by an intermediate device...

CVE-2016-8731

Hard-coded FTP credentials r:r are included in the Foscam C1 running firmware 1.9.1.12. Knowledge of these credentials would allow remote access to any cameras found on the internet that do not have port 50021 blocked by an intermediate device...

CVE-2016-8731

CVE-2016-8731 affects Foscam C1 IP Camera firmware 1.9.1.12, where hard-coded FTP credentials (user: r, pass: r) allow remote FTP access to the camera if port 50021 is reachable. Public analysis confirms the vulnerability enables remote login to the camera’s FTP service and mounted SD card, with ...

CVE-2017-2827

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting in...