Foscam C1 Indoor Hd Camera vulnerabilities

CVE-2017-2877 [CRITICAL] CWE-755 CVE-2017-2877: A missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera ru A missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10001 could allow an attacker to reset the user accounts to factory defaults, without authentication.

CVE-2017-2875 [CRITICAL] CWE-120 CVE-2017-2875: An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10000 can cause a buffer overflow resulting in overwriting arbitrary data.

CVE-2017-2873 [HIGH] CWE-78 CVE-2017-2873: An exploitable command injection vulnerability exists in the web management interface used by the Fo An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SoftAP configuration resulting in command injection. An attacker can simply send an HTTP

CVE-2017-2878 [HIGH] CWE-120 CVE-2017-2878: An exploitable buffer overflow vulnerability exists in the web management interface used by the Fosc An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an HTTP request to the device to trigger this vulnerability.

CVE-2017-2855 [HIGH] CWE-120 CVE-2017-2855: An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue HTTP server.

CVE-2017-2876 [HIGH] CWE-120 CVE-2017-2876: An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10000 can cause a buffer overflow resulting in overwriting arbitrary data.

CVE-2017-2879 [MEDIUM] CWE-120 CVE-2017-2879: An exploitable buffer overflow vulnerability exists in the UPnP implementation used by the Foscam C1 An exploitable buffer overflow vulnerability exists in the UPnP implementation used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted UPnP discovery response can cause a buffer overflow resulting in overwriting arbitrary data. An attacker needs to be in the same subnetwork and reply to a discovery message to