CVE-2021-43517

FOSCAM Camera FI9805E with firmware V4.02.R12.00018510.10012.143900.00000 contains a backdoor that opens Telnet port when special command is sent on port 9530

published April 8, 2022

CVSS
—
EPSS
2%
Percentile
77.3
In the wild
Unconfirmed
What it is

🚨 A special command is the key to unlocking a hidden feature in FOSCAM Camera FI9805E—its Telnet port! 🔥 Think of it like a hotel with a secret backdoor for employees that guests can access if they know the right code. One sneaky request at the right time keeps the door open, allowing anyone to step inside and potentially cause trouble. If an attacker sends the crafted command over port 9530, they can activate the Telnet port, granting them access to the camera as if they had a master key. This could lead to unauthorized control over the camera, compromising your privacy and potentially leaking sensitive video feeds. That's a recipe for an absolute disaster!

Put simply

Think of it like a hotel with a secret backdoor for employees that guests can access if they know the right code. One sneaky request at the right time keeps the door open, allowing anyone to step inside and potentially cause trouble. This vulnerability allows remote access to the camera's Telnet interface through a specific command sent to port 9530, effectively opening a backdoor for exploitation.

What to do

If an attacker sends the crafted command over port 9530, they can activate the Telnet port, granting them access to the camera as if they had a master key. This could lead to unauthorized control over the camera, compromising your privacy and potentially leaking sensitive video feeds. That's a recipe for an absolute disaster! If you're using FOSCAM Camera FI9805E, check for firmware updates and patch to the latest version immediately. If possible, restrict access to the device through network configuration to limit exposure. Keep an eye on your network traffic to spot any suspicious activity. You've got this! Stay vigilant and secure your camera with these steps! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01717 · 77.3th percentile
Published
2022-04-08T16:11Z
EPSS history
Timeline
  • 08 APR 16:11Z
    FOSCAM Camera FI9805E with firmware V4.02.R12.00018510.10012.143900.00000 contains a backdoor that opens Telnet port when special command is sent on port 9530
    cvelistv5