CVE-2017-10835

The CVE-2017-10835 issue affects the Dokodemo eye Smart HD SCR02HD firmware (1.0.3.1000 and earlier). The vulnerability is an arbitrary PHP code execution (CWE-94) that requires authentication and can be triggered by unspecified vectors; the JVN/NVD entries describe this as an authenticated code-...

CVE-2017-10832

CVE-2017-10832 affects the wireless monitor “Dokodemo eye Smart HD” SCR02HD (Firmware 1.0.3.1000 and earlier). The vulnerability is an OS command injection that allows a remote attacker to execute arbitrary OS commands via unspecified vectors. The entry provides no details on exploit status but n...

CVE-2017-10835

"Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows authenticated attackers to conduct code injection attacks via unspecified vectors...

PT-2017-11542

Name of the Vulnerable Software and Affected Versions Dokodemo eye Smart HD SCR02HD Firmware versions 1.0.3.1000 and earlier Description The issue allows authenticated attackers to read arbitrary files via unspecified vectors. This is a directory traversal vulnerability. Recommendations For...

PT-2017-11543

Name of the Vulnerable Software and Affected Versions Dokodemo eye Smart HD SCR02HD Firmware versions 1.0.3.1000 and earlier Description The issue allows authenticated attackers to conduct code injection attacks. Recommendations For Firmware versions 1.0.3.1000 and earlier, update to a version...

PT-2017-11540

Name of the Vulnerable Software and Affected Versions Dokodemo eye Smart HD SCR02HD Firmware versions 1.0.3.1000 and earlier Description The issue allows remote attackers to execute arbitrary OS commands. Recommendations For Firmware versions 1.0.3.1000 and earlier, update to a version later than...

PT-2017-11541

Name of the Vulnerable Software and Affected Versions Dokodemo eye Smart HD SCR02HD Firmware versions 1.0.3.1000 and earlier Description The issue allows remote attackers to bypass access restrictions, enabling them to view information or modify configurations via unspecified vectors...

Dokodemo eye Smart HD SCR02HD Unauthorized Access Vulnerability

Dokodemo eye Smart HD SCR02HD is a wireless monitor from NIPPON ANTENNA. An unauthorized access vulnerability exists in the Dokodemo eye Smart HD SCR02HD, which can be exploited by a remote attacker to view sensitive information and modify configuration...

Dokodemo eye Smart HD SCR02HD Arbitrary PHP Code Execution Vulnerability

Dokodemo eye Smart HD SCR02HD is a wireless monitor from NIPPON ANTENNA. The Dokodemo eye Smart HD SCR02HD suffers from an arbitrary PHP code execution vulnerability that can be exploited by an attacker to execute arbitrary PHP code on the product...

PadTV HD - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application PadTV HD published at the 'play' market has multiple vulnerabilities...

Buffer overflow

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can cause a buffer overflow...

CVE-2017-2850

Summary (CVE-2017-2850): The Foscam C1 Indoor HD Camera (firmware 2.52.2.37) is affected by a vulnerability in the CGIProxy.fcgi service where the Change Username operation can inject arbitrary characters into the pureftpd.passwd file. This bypasses FTP chroot and enables privilege escalation via...

CVE-2017-2851

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can cause a buffer overflow...

CVE-2017-2847

CVE-2017-2847 affects Foscam C1 Indoor HD Cameras via the web management CGIProxy.fcgi service. The vulnerability allows command injection through the CGIProxy setIpInfo path when configuring network settings. An attacker with an administrator account can supply crafted input in the DNS1 paramete...

CVE-2017-2844

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An attacker can simply send an HTTP request to the...

CVE-2017-2849

CVE-2017-2849 affects Foscam C1 Indoor HD Camera (application firmware 2.52.2.37). The web CGI interface (CGIProxy.fcgi) passes ntpServer from the user query to a shell via popen without proper sanitization, enabling command injection through a crafted NTP server value. The exploit can be deliver...

CVE-2017-2850

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary characters in the pureftpd.passwd file during a username change, which in turn allows for bypassing chroot restrictions in...

CVE-2017-2851

CVE-2017-2851 affects the Foscam C1 Indoor HD Camera web CGIProxy.fcgi. A buffer overflow in setWifiSetting is caused by unbounded copying of the comma-separated psk string into a 0x100-sized buffer, enabling an attacker with admin access (privilege 2) to overwrite saved registers (e.g., R4) and ...

CVE-2017-2844

Summary (CVE-2017-2844) : The Foscam C1 Indoor HD Camera web management CGIProxy.fcgi is vulnerable to a command-injection via the SMTP test flow. An authenticated administrator can inject data into the msmtprc configuration by sending a crafted HTTP request through the smtpTest command, leading ...

CVE-2017-2850: Improper Neutralization of Special Elements used in an OS Command

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary characters in the pureftpd.passwd file during a username change, which in turn allows for bypassing chroot restrictions in...