CVE-2017-2827

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published: Jun 21, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-28288.8An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applica CVE-2017-28296.5An exploitable directory traversal vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running appli CVE-2017-28307.5An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applicati CVE-2017-28317.5An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applicati CVE-2017-28327.2An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applica CVE-2017-28337.5An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applica CVE-2017-28347.0An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted CVE-2017-28358.1An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted se CVE-2017-28365.9An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11 CVE-2017-28375.9An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially cra CVE-2017-28385.9An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially CVE-2017-28395.9An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially