PT-2018-7224 · Foscam · Foscam C1 Indoor Hd Camera
Published
2018-09-19
·
Updated
2022-06-07
·
CVE-2017-2879
CVSS v3.1
7.5
High
| Vector | AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Foscam C1 Indoor HD Camera version 2.52.2.43
Description:
A buffer overflow issue exists in the UPnP implementation. It can be triggered by a specially crafted UPnP discovery response, potentially allowing an attacker to overwrite arbitrary data. The attacker must be on the same subnetwork and reply to a discovery message to exploit this issue.
Recommendations:
For version 2.52.2.43, as a temporary workaround, consider disabling the UPnP feature until a patch is available. Restrict access to the camera's network to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Foscam C1 Indoor Hd Camera