cvedb.io
CVE-2017-2871
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2018-04-17T20:29:00.223 · Last modified 2026-06-17T01:17:02.077

Summary

Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. An attacker who is in the same subnetwork of the camera or has remote administrator access can fully compromise the device by performing a firmware recovery using a custom image.

Affected products

foscam — c1_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when foscam ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.