Foscam vulnerabilities, page 4

65 vulnerabilities

Known vulnerabilities in Foscam products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 51 products.

7.7CVE-2017-2829foscamc1_indoor_hd_camera_firmware+1
EPSS score
2.87%
An exploitable directory traversal vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause the application to read a file from disk but a failure to adequately filter characters results in allowing an attacker to specify a file outside of a directory. An attacker can simply send an HTTP request to the device to trigger this vulnerability.9.9CVE-2017-2872foscamc1_firmware+1
EPSS score
1.63%
Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A HTTP request can allow for a user to perform a firmware upgrade using a crafted image. Before any firmware upgrades in this image are flashed to the device, binaries as well as arguments to shell commands contained in the image are executed with elevated privileges.9.6CVE-2017-2871foscamc1_firmware+1
EPSS score
1.07%
Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. An attacker who is in the same subnetwork of the camera or has remote administrator access can fully compromise the device by performing a firmware recovery using a custom image.9.8CVE-2017-2805foscamc1_hd_indoor_camera_firmware+1
EPSS score
26.25%
An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera. A specially crafted http request can cause a stack-based buffer overflow resulting in overwriting arbitrary data on the stack frame. An attacker can simply send an http request to the device to trigger this vulnerability.6.7CVE-2019-25437foscamfoscam video management system
EPSS score
0.16%
Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 5000-character buffer into the UID parameter during device addition to trigger an application crash when the Login Check function is invoked.