Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-2831 State: PUBLISHED Published: 2017-06-21T13:00:00 Last Updated: 2024-08-05T14:09:16.665Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: Foscam Products: Indoor IP Camera C1 Series Problem Types: buffer overflow Description: An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: -
P request to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99190 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0332
CVE ID: CVE-2017-2832 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-17T04:08:52.705Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Indoor IP Camera Problem Types: command injection Description: An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during a password change resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additional Analyst Notes: -
n. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99184 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0335
CVE ID: CVE-2017-2833 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-17T02:21:27.300Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Indoor IP Camera Problem Types: command injection Description: An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters resulting in command injection during the boot process. To trigger this vulnerability, an attacker needs to send an HTTP request and reboot the device. Additional Analyst Not
. To trigger this vulnerability, an attacker needs to send an HTTP request and reboot the device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99184 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0334
CVE ID: CVE-2017-2834 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T20:03:03.699Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H) Vendors: FreeRDP Products: FreeRDP Problem Types: remote code execution Description: An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle attack to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9994
is vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99942 - https://www.debian.org/security/2017/dsa-3923 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0336
CVE ID: CVE-2017-2835 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T20:47:31.355Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H) Vendors: FreeRDP Products: FreeRDP Problem Types: remote code execution Description: An exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-3923 -
bility. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-3923 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0337
CVE ID: CVE-2017-2836 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-17T00:57:07.472Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: FreeRDP Products: FreeRDP Problem Types: denial of service Description: An exploitable denial of service vulnerability exists within the reading of proprietary server certificates in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfoc
e to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99942 - https://www.debian.org/security/2017/dsa-3923 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0338
CVE ID: CVE-2017-2837 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T22:10:32.193Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: FreeRDP Products: FreeRDP Problem Types: denial of service Description: An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99942
vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99942 - https://www.debian.org/security/2017/dsa-3923 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0339
CVE ID: CVE-2017-2838 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-17T03:13:28.026Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: FreeRDP Products: FreeRDP Problem Types: denial of service Description: An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99
this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99942 - https://www.debian.org/security/2017/dsa-3923 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0340
CVE ID: CVE-2017-2839 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T23:10:49.379Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: FreeRDP Products: FreeRDP Problem Types: denial of service Description: An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge packet can cause the program termination leading to a denial of service condition. An attacker can compromise the server or use man in the middle to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99
this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99942 - https://www.debian.org/security/2017/dsa-3923 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0341
CVE ID: CVE-2017-2840 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T18:19:06.091Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: EZB Systems Products: UltraISO Problem Types: buffer overflow Description: A buffer overflow vulnerability exists in the ISO parsing functionality of EZB Systems UltraISO 9.6.6.3300. A specially crafted .ISO file can cause a vulnerability resulting in potential code execution. An attacker can provide a specific .ISO file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100084 - https://www.talosintelligence.com/vulnerability_r
ram Container: References: - http://www.securityfocus.com/bid/100084 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0342
CVE ID: CVE-2017-2841 State: PUBLISHED Published: 2017-06-27T15:00:00 Last Updated: 2024-08-05T14:09:16.721Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Indoor IP Camera C1 Series Problem Types: command injection Description: An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additional Analyst N
execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99184 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0343
CVE ID: CVE-2017-2842 State: PUBLISHED Published: 2017-06-27T15:00:00 Last Updated: 2024-08-05T14:09:17.266Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Indoor IP Camera C1 Series Problem Types: command injection Description: In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securit
evice to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99184 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0344
CVE ID: CVE-2017-2843 State: PUBLISHED Published: 2017-06-27T15:00:00 Last Updated: 2024-08-05T14:09:17.264Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Indoor IP Camera C1 Series Problem Types: command injection Description: In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securit
evice to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99184 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0345
CVE ID: CVE-2017-2844 State: PUBLISHED Published: 2017-06-29T17:00:00Z Last Updated: 2024-09-16T19:00:30.820Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Indoor IP Camera C1 Series Problem Types: command injection Description: In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.security
vice to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99184 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0346
CVE ID: CVE-2017-2845 State: PUBLISHED Published: 2017-06-29T17:00:00Z Last Updated: 2024-09-16T20:26:21.673Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Indoor IP Camera C1 Series Problem Types: command injection Description: An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SMTP configuration tests resulting in command execution Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid
g in command execution Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99184 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0347
CVE ID: CVE-2017-2846 State: PUBLISHED Published: 2017-06-29T17:00:00Z Last Updated: 2024-09-16T19:41:13.183Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Indoor IP Camera C1 Series Problem Types: command injection Description: In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during manual network configuration resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://
st to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99184 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0348
CVE ID: CVE-2017-2847 State: PUBLISHED Published: 2017-06-29T17:00:00Z Last Updated: 2024-09-16T23:36:23.091Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Indoor IP Camera C1 Series Problem Types: command injection Description: In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during manual network configuration resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://
st to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99184 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0349
CVE ID: CVE-2017-2848 State: PUBLISHED Published: 2017-06-29T17:00:00Z Last Updated: 2024-09-16T20:11:21.748Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Indoor IP Camera C1 Series Problem Types: command injection Description: In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during manual network configuration resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://
st to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99184 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0350
CVE ID: CVE-2017-2849 State: PUBLISHED Published: 2017-06-29T17:00:00Z Last Updated: 2024-09-16T19:46:08.948Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Indoor IP Camera C1 Series Problem Types: command injection Description: In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during NTP server configuration resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.
o the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99184 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0351
CVE ID: CVE-2017-2850 State: PUBLISHED Published: 2017-06-29T17:00:00Z Last Updated: 2024-09-17T00:01:46.167Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Indoor IP Camera C1 Series Problem Types: password injection Description: In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary characters in the pureftpd.passwd file during a username change, which in turn allows for bypassing chroot restrictions in the FTP server. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additional Analys
e FTP server. An attacker can simply send an HTTP request to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99184 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0352
CVE ID: CVE-2017-2851 State: PUBLISHED Published: 2017-06-29T17:00:00Z Last Updated: 2024-09-16T23:06:35.287Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Indoor IP Camera C1 Series Problem Types: remote code execution Description: In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can cause a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99190 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0353
CVE ID: CVE-2017-2852 State: PUBLISHED Published: 2018-06-01T15:00:00Z Last Updated: 2024-09-17T02:31:31.833Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Talos Products: Natus Problem Types: denial of service Description: An exploitable denial-of-service vulnerability exists in the unserialization of lists functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out-of-bounds read, resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104490 - https://www.talosintelligence.com
otes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104490 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0354
CVE ID: CVE-2017-2853 State: PUBLISHED Published: 2018-04-05T19:00:00Z Last Updated: 2024-09-17T01:47:00.307Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Natus Medical Incorporated Products: Natus Problem Types: remote code execution Description: An exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause a stack buffer overflow resulting in arbitrary command execution. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1044
is vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104490 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0355
CVE ID: CVE-2017-2854 State: PUBLISHED Published: 2018-09-17T20:00:00Z Last Updated: 2024-09-17T04:20:34.508Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Foscam Indoor IP Camera C1 Series Problem Types: buffer overflow Description: An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue HTTP server. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulne
ue HTTP server. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0357
CVE ID: CVE-2017-2855 State: PUBLISHED Published: 2018-09-19T16:00:00Z Last Updated: 2024-09-16T18:02:53.997Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Foscam C1 Indoor HD Camera Problem Types: Buffer Overflow Description: An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue HTTP server. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_re
server. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0358
CVE ID: CVE-2017-2856 State: PUBLISHED Published: 2018-09-17T20:00:00Z Last Updated: 2024-09-16T17:54:27.821Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Foscam Indoor IP Camera C1 Series Problem Types: buffer overflow Description: An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue HTTP server. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulne
ue HTTP server. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0359
CVE ID: CVE-2017-2857 State: PUBLISHED Published: 2018-09-17T20:00:00Z Last Updated: 2024-09-16T16:18:03.843Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Foscam Products: Foscam Indoor IP Camera C1 Series Problem Types: buffer overflow Description: An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue HTTP server. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulne
ue HTTP server. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0360