NVD

Id
87971  
Name
CVE-2017-2849  
Description
In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during NTP server configuration resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-06-29  
Modified Date
2017-07-05  
Seq
2017-2849  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
421944 87971 CVE-2017-8291 http://openwall.com/lists/oss-security/2017/04/28/2  View
421945 87971 CVE-2017-8291 https://bugzilla.redhat.com/show_bug.cgi?id=1446063  View
421946 87971 CVE-2017-8291 https://bugzilla.suse.com/show_bug.cgi?id=1036453  View
421947 87971 CVE-2017-8291 https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=04b37bbce174eed24edec7ad5b920eb93db4d47d  View
430276 87971 CVE-2017-0545 1038201  View
430277 87971 CVE-2017-0545 1038201  View

Related JVN