CVE-2017-2877

CRITICAL

Foscam C1 Firmware - Improper Exception Handling

Title source: rule

Description

A missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10001 could allow an attacker to reset the user accounts to factory defaults, without authentication.

References (1)

[Exploit, Third Party Advisory] https://talosintelligence.com/vulnerability_reports/TALOS-2017-0384

Scores

CVSS v3 9.8

EPSS 0.0049

EPSS Percentile 65.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-755

Status published

Affected Products (1)

foscam/c1_firmware

Timeline

Published Sep 19, 2018

Tracked Since Feb 18, 2026