CVE-2017-2879

An exploitable buffer overflow vulnerability exists in the UPnP implementation used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted UPnP discovery response can cause a buffer overflow resulting in overwriting arbitrary data. An attacker needs to be in the same subnetwork and reply to a discovery message to trigger this vulnerability.

Score

CVSS 3.0 7.5 High

Status

Modified - talos-cna@cisco.com

Published

2018-09-19

Last modified

2024-09-17

Weaknesses

CWE-120

Affected products

• C1 Firmware (Foscam)
• Foscam C1 Indoor Hd Camera (Foscam)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2017-0386