PT-2018-7209 · Foscam · Foscam C1 Indoor Hd Camera

Publicado

2018-09-17

·

Atualizado

2022-06-07

·

CVE-2017-2857

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43
Description: A buffer overflow issue exists in the DDNS client of the Foscam C1 Indoor HD Camera. When DDNS is enabled, an attacker who can intercept HTTP connections can fully compromise the device by setting up a rogue HTTP server.
Recommendations: For Foscam C1 Indoor HD Camera version 2.52.2.43, consider disabling the DDNS feature until a patch is available to prevent exploitation. Restrict access to the device when DDNS is enabled to minimize the risk of compromise.

Exploit

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

CVE-2017-2857

Produtos afetados

Foscam C1 Indoor Hd Camera