Vulnerability Description
An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Foscam | C1 Firmware | 2.52.2.43 |
| Foscam | C1 | - |
Related Weaknesses (CWE)
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2017-0385ExploitThird Party Advisory
- https://talosintelligence.com/vulnerability_reports/TALOS-2017-0385ExploitThird Party Advisory
FAQ
What is CVE-2017-2878?
CVE-2017-2878 is a vulnerability with a CVSS score of 7.5 (HIGH). An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can ...
How severe is CVE-2017-2878?
CVE-2017-2878 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-2878?
Check the references section above for vendor advisories and patch information. Affected products include: Foscam C1 Firmware, Foscam C1.