Foscam C1 Indoor HD Camera DDNS Client Buffer Overflow Vulnerability (CNVD-2017-34261)

Foscam C1 Indoor HD Camera is a wireless high-definition IP camera from Foscam, China.DDNS client is one of the dynamic domain name service clients. A buffer overflow vulnerability exists in the DDNS client in the Foscam C1 Indoor HD Camera. When DDNS is turned on, an attacker can exploit this...

Foscam IP Video Camera CGIProxy.fcgi Firmware Upgrade Code Execution Vulnerability(CVE-2017-2872)

Summary Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A HTTP request can allow for a user to perform a firmware upgrade using a crafted image. Before any firmware upgrades in this image are flashed to th...

Vulnerability Spotlight: Multiple Vulnerabilities in Foscam C1 Indoor HD Cameras

These vulnerabilities were discovered by Claudio Bozzato of Cisco Talos.Executive SummaryThe Foscam C1 Indoor HD Camera is a network-based camera that is marketed for use in a variety of applications, including use as a home security monitoring device. Talos recently identified several...

Foscam IP Video Camera devMng Multi-Camera Port 10000 Command 0x0002 Username Field Code Execution Vulnerability

Summary An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10000 can cause a buffer overflow resulting in overwriting arbitrary data. Tested Versions...

Foscam IP Video Camera webService oray.com DDNS Client Code Execution Vulnerability

Summary An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating...

Foscam IP Video Camera CGIProxy.fcgi SMTP Test Sender Parameter Configuration Command Injection Vulnerability(CVE-2017-2844)

Summary An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting...

Information disclosure

Information disclosure vulnerability in Netatmo Indoor Module firmware 100 and earlier...

CVE-2015-1600

Information disclosure vulnerability in Netatmo Indoor Module firmware 100 and earlier...

CVE-2015-1600

Netatmo CVE-2015-1600 affects the Indoor Module firmware 100 and earlier. The vulnerability is an information disclosure caused by transmitting the device configuration, including the WiFi password, in plaintext during initial setup. In practice, the Netatmo Weather Station could leak sensitive u...

CVE-2015-1600

Information disclosure vulnerability in Netatmo Indoor Module firmware 100 and earlier...

Foscam Indoor IP Camera C1 Series Command Injection Vulnerability

Foscam Indoor IP Camera C1 Series is a C1 series wireless IP camera product from Foscam China. A security vulnerability exists in the web management interface of the Foscam Indoor IP Camera C1 Series using the 2.52.2.37 application firmware. The vulnerability can be exploited to inject arbitrary...

CVE-2017-2849

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during NTP server configuration resulting in command injection. An attacker can simply send an HTTP reques...

CVE-2017-2850

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary characters in the pureftpd.passwd file during a username change, which in turn allows for bypassing chroot restrictions in...

CVE-2017-2846

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during manual network configuration resulting in command injection. An attacker can simply send an HTTP...

Buffer overflow

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can cause a buffer overflow...

CVE-2017-2844

Summary (CVE-2017-2844) : The Foscam C1 Indoor HD Camera web management CGIProxy.fcgi is vulnerable to a command-injection via the SMTP test flow. An authenticated administrator can inject data into the msmtprc configuration by sending a crafted HTTP request through the smtpTest command, leading ...

CVE-2017-2851

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can cause a buffer overflow...

CVE-2017-2847

CVE-2017-2847 affects Foscam C1 Indoor HD Cameras via the web management CGIProxy.fcgi service. The vulnerability allows command injection through the CGIProxy setIpInfo path when configuring network settings. An attacker with an administrator account can supply crafted input in the DNS1 paramete...

CVE-2017-2844

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An attacker can simply send an HTTP request to the...

CVE-2017-2850

Summary (CVE-2017-2850): The Foscam C1 Indoor HD Camera (firmware 2.52.2.37) is affected by a vulnerability in the CGIProxy.fcgi service where the Change Username operation can inject arbitrary characters into the pureftpd.passwd file. This bypasses FTP chroot and enables privilege escalation via...