1. Home
  2. CVE Database
  3. CVE-2017-2871
HIGH · 8.8

CVE-2017-2871

Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. An attacker who is in the same subnetwork of the camera or h...

Vulnerability Description

Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. An attacker who is in the same subnetwork of the camera or has remote administrator access can fully compromise the device by performing a firmware recovery using a custom image.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
FoscamC1 Firmware2.52.2.43
FoscamC1-

Related Weaknesses (CWE)

CWE-287

References

FAQ

What is CVE-2017-2871?

CVE-2017-2871 is a vulnerability with a CVSS score of 8.8 (HIGH). Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. An attacker who is in the same subnetwork of the camera or h...

How severe is CVE-2017-2871?

CVE-2017-2871 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-2871?

Check the references section above for vendor advisories and patch information. Affected products include: Foscam C1 Firmware, Foscam C1.