CVE-2017-2875

An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43

High · published September 19, 2018

CVSS v3.0
8.8
EPSS
1%
Percentile
72.6
In the wild
Unconfirmed
What it is

⚡ A crafty buffer overflow vulnerability in the Foscam C1 camera can be triggered with a single malicious request! 🔥 Think of it like a restaurant getting a huge order for the wrong dish that spills over into the wrong kitchen—once the overflow happens, everything goes haywire! An attacker could exploit this vulnerability to overwrite arbitrary data, potentially taking control of the camera and spying on your private moments. This could lead to unauthorized access to sensitive video feeds, creating a scenario that’s absolutely devastating for your privacy!

Put simply

Think of it like a restaurant getting a huge order for the wrong dish that spills over into the wrong kitchen—once the overflow happens, everything goes haywire! This buffer overflow vulnerability in Foscam's Multi-Camera interface occurs when a specially crafted request is sent to port 10000, allowing the attacker to manipulate the memory and overwrite data.

What to do

An attacker could exploit this vulnerability to overwrite arbitrary data, potentially taking control of the camera and spying on your private moments. This could lead to unauthorized access to sensitive video feeds, creating a scenario that’s absolutely devastating for your privacy! Update your Foscam camera firmware to version 2.52.2.44 or later to mitigate this vulnerability. Regularly check for firmware updates and ensure your network configurations limit access to port 10000 from untrusted sources. 🛡️ You've got this! Following these steps will keep your camera secure and your privacy intact! 🎉

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01428 · 72.6th percentile
Published
2018-09-19T16:00Z
EPSS history
Timeline
  • 19 SEP 16:00Z
    An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43
    cvelistv5