What’s Vulnerable › Vulnerabilities

CVE-2017-14743

• Severity: high (CVSS 8.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-09-26 · updated 2026-06-17
• Weakness: CWE-89

Description

Faleemi FSC-880 00.01.01.0048P2 devices allow unauthenticated SQL injection via the Username element in an XML document to /onvif/device_service, as demonstrated by reading the admin password.

Affected products

• faleemi Fsc-880 Firmware: 00.01.01.0048p2

References

• https://medium.com/iotsploit/faleemi-fsc-880-multiple-security-vulnerabilities-ed1d132c2cce
• https://medium.com/iotsploit/faleemi-fsc-880-multiple-security-vulnerabilities-ed1d132c2cce

Get alerted when CVE-2017-14743 or the next vulnerability affects your stack