CVE-2017-2831

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an HTTP request to the device to trigger this vulnerability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
Foscam	Indoor IP Camera C1 Series	n/a

References

http://www.securityfocus.com/bid/99190Broken Link
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0332Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/99190Broken Link
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0332Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Jun 21, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-28327.2An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applica CVE-2017-28337.5An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applica CVE-2017-28347.0An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted CVE-2017-28358.1An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted se CVE-2017-28365.9An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11 CVE-2017-28375.9An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially cra CVE-2017-28385.9An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially CVE-2017-28395.9An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially CVE-2017-28407.8A buffer overflow vulnerability exists in the ISO parsing functionality of EZB Systems UltraISO 9.6.6.3300. A specially crafted .ISO file ca CVE-2017-28418.8An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applica CVE-2017-28428.8In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can a CVE-2017-28438.8In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can a