NetSight
high8.8

CVE-2017-2845

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.…

Impact

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SMTP configuration tests resulting in command execution

Affected products

VendorProductAffected versions
FoscamC1 Indoor Hd Camera Firmware
Version 2.52.2.37

Weakness classification

References