CVE-2017-2828

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Jun 21, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-28296.5An exploitable directory traversal vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running appliCVE-2017-28307.5An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applicatiCVE-2017-28317.5An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applicatiCVE-2017-28327.2An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applicaCVE-2017-28337.5An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applicaCVE-2017-28347.0An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially craftedCVE-2017-28358.1An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted seCVE-2017-28365.9An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11CVE-2017-28375.9An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially craCVE-2017-28385.9An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A speciallyCVE-2017-28395.9An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A speciallyCVE-2017-28407.8A buffer overflow vulnerability exists in the ISO parsing functionality of EZB Systems UltraISO 9.6.6.3300. A specially crafted .ISO file ca
CVE-2017-2828: High severity, CVSS 8.8 | Vulnix