CVE-2017-2872 in C1 Indoor HD Cameraالمعلومات

الملخص

بحسب MITRE

Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A HTTP request can allow for a user to perform a firmware upgrade using a crafted image. Before any firmware upgrades in this image are flashed to the device, binaries as well as arguments to shell commands contained in the image are executed with elevated privileges.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

مسؤول

Talos

حجز

30/11/2016

إفشاء

17/09/2018

الاعتدال

تمت الموافقة

إدخال

VDB-124139

EPSS

0.00274

KEV

لا

النشاطات

منخفض جدًا

المصادر

Do you know our Splunk app?

Download it now for free!