NetSight
high8.1

CVE-2017-7648

Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographi…

Impact

Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

Affected products

VendorProductAffected versions
FoscamC1
All versions
FoscamC1 Lite
All versions
FoscamC2
All versions
FoscamFi9800xe
All versions
FoscamFi9826p
All versions
FoscamFi9828p
All versions
FoscamFi9851p
All versions
FoscamFi9853ep
All versions
FoscamFi9901ep
All versions
FoscamFi9903p
All versions
FoscamFi9928p
All versions
FoscamR2
All versions

Weakness classification

References