PT-2017-17863 · Foscam · Foscam

Publicado 2017-04-10 · Atualizado 2017-04-17 · CVE-2017-7648

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Foscam networked devices (affected versions not specified)

Description The issue concerns Foscam networked devices using the same hardcoded SSL private key across different installations. This allows remote attackers to bypass cryptographic protection by using knowledge of the key obtained from another installation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2017-7648

Produtos afetados

Foscam

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2017-7648 · Nota de Segurança
• http://securityfocus.com/archive/1/540388/30/0/threaded · Nota