CVE-2017-2871
HIGHFoscam C1 Indoor HD Camera 2.52.2.43 - Unauthenticated Firmware Recovery Bypass
Title source: llmDescription
Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. An attacker who is in the same subnetwork of the camera or has remote administrator access can fully compromise the device by performing a firmware recovery using a custom image.
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://talosintelligence.com/vulnerability_reports/TALOS-2017-0378
Scores
CVSS v3
8.8
EPSS
0.0111
EPSS Percentile
61.7%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-287
Status
published
Products (1)
foscam/c1_firmware
2.52.2.43
Published
Apr 17, 2018
Tracked Since
Feb 18, 2026