CVE-2017-2805 An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera. A specially crafted http request can cause a stack-based buffer....
CriticalCVSS 9.8
EPSS 26.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera. A specially crafted http request can cause a stack-based buffer overflow resulting in overwriting arbitrary data on the stack frame. An attacker can simply send an http request to the device to trigger this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| foscam c1 hd indoor camera firmware | <= 1.9.3.17 | No fix listed |
| foscam Indoor IP Camera C1 Series | All versions | No fix listed |
References
- 99190 broken-link third-party-advisory vdb-entry
- www.talosintelligence.com exploit third-party-advisory