CVE-2017-2872

CVSS 9.9 CRITICALEPSS 1.6%

Vexday Risk Score

28Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 9.9EPSS 1.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

17 set 2018Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A HTTP request can allow for a user to perform a firmware upgrade using a crafted image. Before any firmware upgrades in this image are flashed to the device, binaries as well as arguments to shell commands contained in the image are executed with elevated privileges.

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Produtos afetados

Foscam · Foscam Indoor IP Camera C1 Series

Referências

https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0379