An exploitable buffer overflow vulnerability exists in the UPnP implementation used by the Foscam C1 Indoor HD Camera running application f…

Published 8 y ago 2018-09-19 · modified 4 mo ago 2026-06-17 · JSON

CVSS

7.5

v3.0 · CNA

CISA KEV

not known exploited

EPSS

0.8%

percentile 57%

Public exploits

none known

An exploitable buffer overflow vulnerability exists in the UPnP implementation used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted UPnP discovery response can cause a buffer overflow resulting in overwriting arbitrary data. An attacker needs to be in the same subnetwork and reply to a discovery message to trigger this vulnerability.

Exploit prediction (EPSS)

0.82% probability of exploitation in the next 30 days, higher than 57% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CNA	3.0	7.5	`CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H`
NVD	3.1	5.3	`CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N`
CNA	3.0	7.5	`CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H`
NVD	2.0	2.9	`AV:A/AC:M/Au:N/C:N/I:P/A:N`

Affected products

Foscam Foscam C1 Indoor HD Camera

Classification

Weakness

CWE-120 Buffer Copy without Checking Size of Input

References

talosintelligence.com /vulnerability_reports/TALOS-2017-0386 · x_refsource_MISC, x_transferred

Sources

CVE List: CVE-2017-2879
NVD: CVE-2017-2879

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.