What’s Vulnerable › Vulnerabilities

CVE-2017-7648

• Severity: high (CVSS 8.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-04-10 · updated 2026-06-17
• Weakness: CWE-798

Description

Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

Affected products

• Foscam C1: all versions
• Foscam C1 Lite: all versions
• Foscam C2: all versions
• Foscam Fi9800Xe: all versions
• Foscam Fi9826P: all versions
• Foscam Fi9828P: all versions
• Foscam Fi9851P: all versions
• Foscam Fi9853Ep: all versions
• Foscam Fi9901Ep: all versions
• Foscam Fi9903P: all versions
• Foscam Fi9928P: all versions
• Foscam R2: all versions

References

• http://www.securityfocus.com/archive/1/540388/30/0/threaded
• http://www.securityfocus.com/archive/1/540388/30/0/threaded

Get alerted when CVE-2017-7648 or the next vulnerability affects your stack