CVSS: 9.9EPSS: 0%CPEs: 2EXPL: 1CVE-2017-2872
https://notcve.org/view.php?id=CVE-2017-2872
Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A HTTP request can allow for a user to perform a firmware upgrade using a crafted image. Before any firmware upgrades in this image are flashed to the device, binaries as well as arguments to shell commands contained in the image are executed with elevated privileges. Existen comprobaciones de seguridad insuficientes en el procedimiento de recuperación empleado por Foscam C1 Indoor HD Camera ejecutando el firmware de aplicación 2.52.2.43. Una petición HTTP puede permitir que un usuario realice una actualización de firmware mediante una imagen manipulada. • https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0379 • CWE-287: Improper Authentication •
CVSS: 9.3EPSS: 0%CPEs: 2EXPL: 1CVE-2017-2857
https://notcve.org/view.php?id=CVE-2017-2857
An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue HTTP server. Existe una vulnerabilidad explotable de desbordamiento de búfer en el cliente DDNS empleado por Foscam C1 Indoor HD Camera ejecutando el firmware de aplicación 2.52.2.43. En dispositivos con DDNS habilitado, un atacante que pueda interceptar conexiones HTTP podrá comprometer completamente el dispositivo creando un servidor HTTP fraudulento. • https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0360 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 9.3EPSS: 0%CPEs: 2EXPL: 1CVE-2017-2854
https://notcve.org/view.php?id=CVE-2017-2854
An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue HTTP server. Existe una vulnerabilidad explotable de desbordamiento de búfer en el cliente DDNS empleado por Foscam C1 Indoor HD Camera ejecutando el firmware de aplicación 2.52.2.43. En dispositivos con DDNS habilitado, un atacante que pueda interceptar conexiones HTTP podrá comprometer completamente el dispositivo creando un servidor HTTP corrupto. • https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0357 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1CVE-2017-2874
https://notcve.org/view.php?id=CVE-2017-2874
An information disclosure vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10001 can allow for a user to retrieve sensitive information without authentication. Existe una vulnerabilidad de divulgación de información en la interfaz Multi-Camera empleada por Foscam C1 Indoor HD Camera ejecutando el firmware de aplicación 2.52.2.43. Una petición especialmente manipulada en el puerto 10001 puede permitir que un usuario recupere información sensible sin autenticación. • https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0381 •
CVSS: 9.0EPSS: 0%CPEs: 102EXPL: 1CVE-2018-6831
https://notcve.org/view.php?id=CVE-2018-6831
The setSystemTime function in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI9851P V3, and FI9853EP V2 2.84.2.33 and earlier, FI9816P V3, FI9821EP V2, FI9821P V3, FI9826P V3, and FI9831P V3 2.81.2.33 and earlier, C1, C1 V2, C1 Lite, and C1 Lite V2 2.52.2.47 and earlier, FI9800P, FI9800P V2, FI9803P V2, FI9803P V3, and FI9851P V2 2.54.2.47 and earlier, FI9815P, FI9815P V2, FI9816P, and FI9816P V2, 2.51.2.47 and earlier, R2 and R4 2.71.1.59 and earlier, C2 and FI9961EP 2.72.1.59 and earlier, FI9900EP, FI9900P, and FI9901EP 2.74.1.59 and earlier, FI9928P 2.74.1.58 and earlier, FI9803EP and FI9853EP 2.22.2.31 and earlier, FI9803P and FI9851P 2.24.2.31 and earlier, FI9821P V2, FI9826P V2, FI9831P V2, and FI9821EP 2.21.2.31 and earlier, FI9821W V2, FI9831W, FI9826W, FI9821P, FI9831P, and FI9826P 2.11.1.120 and earlier, FI9818W V2 2.13.2.120 and earlier, FI9805W, FI9804W, FI9804P, FI9805E, and FI9805P 2.14.1.120 and earlier, FI9828P, and FI9828W 2.13.1.120 and earlier, and FI9828P V2 2.11.1.133 and earlier allows remote authenticated users to execute arbitrary commands via a ';' in the ntpServer argument. NOTE: this issue exists because of an incomplete fix for CVE-2017-2849. La función setSystemTime en cámaras Foscam C1 Lite V3 y C1 V3 con versiones de firmware 2.82.2.33 y anteriores, FI9800P V3, FI9803P V4, FI9851P V3 y FI9853EP V2 2.84.2.33 y anteriores, FI9816P V3, FI9821EP V2, FI9821P V3, FI9826P V3 y FI9831P V3 2.81.2.33 y anteriores, C1, C1 V2, C1 Lite y C1 Lite V2 2.52.2.47 y anteriores, FI9800P, FI9800P V2, FI9803P V2, FI9803P V3 y FI9851P V2 2.54.2.47 y anteriores, FI9815P, FI9815P V2, FI9816P y FI9816P V2, 2.51.2.47 y anteriores, R2 and R4 2.71.1.59 y anteriores, C2 y FI9961EP 2.72.1.59 y anteriores, FI9900EP, FI9900P y FI9901EP 2.74.1.59 y anteriores, FI9928P 2.74.1.58 y anteriores, FI9803EP y FI9853EP 2.22.2.31 y anteriores, FI9803P y FI9851P 2.24.2.31 y anteriores, FI9821P V2, FI9826P V2, FI9831P V2 y FI9821EP 2.21.2.31 y anteriores, FI9821W V2, FI9831W, FI9826W, FI9821P, FI9831P y FI9826P 2.11.1.120 y anteriores, FI9818W V2 2.13.2.120 y anteriores, FI9805W, FI9804W, FI9804P, FI9805E y FI9805P 2.14.1.120 y anteriores, FI9828P y FI9828W 2.13.1.120 y anteriores y FI9828P V2 2.11.1.133 y anteriores permite que los usuarios autenticados remotos ejecuten comandos arbitrarios mediante un ";" en el argumento ntpServer. NOTA: este problema existe debido a una solución incompleta para CVE-2017-2849. • https://blog.vdoo.com/2018/06/06/vdoo-has-found-major-vulnerabilities-in-foscam-cameras https://www.foscam.com/company/securing-your-foscam-camera-important-notice.html • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •