CVE-2017-7648 Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging kno...
HighCVSS 8.1
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| foscam c1 | All versions | No fix listed |
| foscam c1 lite | All versions | No fix listed |
| foscam c2 | All versions | No fix listed |
| foscam fi9800xe | All versions | No fix listed |
| foscam fi9826p | All versions | No fix listed |
| foscam fi9828p | All versions | No fix listed |
| foscam fi9851p | All versions | No fix listed |
| foscam fi9853ep | All versions | No fix listed |
| foscam fi9901ep | All versions | No fix listed |
| foscam fi9903p | All versions | No fix listed |
| foscam fi9928p | All versions | No fix listed |
| foscam r2 | All versions | No fix listed |
References
- www.securityfocus.com third-party-advisory vdb-entry