What’s Vulnerable › Vulnerabilities

CVE-2017-18377

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-06-11 · updated 2026-06-17
• Weakness: CWE-77

Description

An issue was discovered on Wireless IP Camera (P2P) WIFICAM cameras. There is Command Injection in the set_ftp.cgi script via shell metacharacters in the pwd variable, as demonstrated by a set_ftp.cgi?svr=192.168.1.1&port=21&user=ftp URI.

Affected products

• Goahead Wireless Ip Camera Wificam Firmware: all versions

References

• https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#pre-auth-root-rce
• https://pierrekim.github.io/blog/2017-03-08-camera-goahead-0day.html#pre-auth-root-rce

Get alerted when CVE-2017-18377 or the next vulnerability affects your stack