CVE-2017-2832

Severity: high (CVSS 7.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-04-24 · updated 2026-06-17
Weakness: CWE-77

Description

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during a password change resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability.

Affected products

Foscam C1 Indoor HD Camera: 2.52.2.37

References

http://www.securityfocus.com/bid/99184
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0335
http://www.securityfocus.com/bid/99184
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0335

Get alerted when CVE-2017-2832 or the next vulnerability affects your stack