CVE-2017-2829

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An exploitable directory traversal vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause the application to read a file from disk but a failure to adequately filter characters results in allowing an attacker to specify a file outside of a directory. An attacker can simply send an HTTP request to the device to trigger this vulnerability.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Jun 21, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-28307.5An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applicatiCVE-2017-28317.5An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applicatiCVE-2017-28327.2An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applicaCVE-2017-28337.5An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applicaCVE-2017-28347.0An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially craftedCVE-2017-28358.1An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted seCVE-2017-28365.9An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11CVE-2017-28375.9An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially craCVE-2017-28385.9An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A speciallyCVE-2017-28395.9An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A speciallyCVE-2017-28407.8A buffer overflow vulnerability exists in the ISO parsing functionality of EZB Systems UltraISO 9.6.6.3300. A specially crafted .ISO file caCVE-2017-28418.8An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applica
CVE-2017-2829: Medium severity, CVSS 6.5 | Vulnix