Read the docs

Foscam

Records66All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical16CVSS 9.0–10.0
CVSS high42CVSS 7.0–8.9

Exploited now

Foscam records in CISA KEV

No Foscam vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

66 records

Priority MEDIUM 64

An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.26248 Published 2017-06-21 No fix listed CWE-787
Priority MEDIUM 63

Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supplying an excessively long string.

CVSS 4.0MEDIUM 6.7 Local No auth User interaction EPSS 0.00158 Published 2026-02-20 No fix listed CWE-121
Priority MEDIUM 57

Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates credentials based on predictable camera subdomain names, which allows remote attackers to spoof or hijack arbitrary cameras a…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.12091 Published 2014-05-14 No fix listed CWE-255
Priority MEDIUM 49

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0789 Published 2017-06-21 No fix listed CWE-78
Priority MEDIUM 49

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0789 Published 2017-06-21 No fix listed CWE-78
Priority MEDIUM 47

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.06543 Published 2017-06-29 No fix listed CWE-78
Priority MEDIUM 47

Hard-coded FTP credentials (r:r) are included in the Foscam C1 running firmware 1.9.1.12.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02645 Published 2017-06-21 No fix listed CWE-798
Priority MEDIUM 46

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01852 Published 2018-11-07 No fix listed CWE-287
Priority MEDIUM 46

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01995 Published 2018-11-07 No fix listed CWE-798
Priority MEDIUM 46

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02036 Published 2018-11-07 No fix listed CWE-798
Priority MEDIUM 46

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01995 Published 2018-11-07 No fix listed CWE-521
Priority MEDIUM 46

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01995 Published 2018-11-07 No fix listed CWE-798
Priority MEDIUM 46

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05428 Published 2017-06-27 No fix listed CWE-78
Priority MEDIUM 45

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during NTP server configurati…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04322 Published 2017-06-29 No fix listed CWE-78
Priority MEDIUM 45

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during manual network configu…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04091 Published 2017-06-29 No fix listed CWE-78
Priority MEDIUM 45

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during manual network configu…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04091 Published 2017-06-29 No fix listed CWE-78
Priority MEDIUM 45

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during manual network configu…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04091 Published 2017-06-29 No fix listed CWE-78
Load more
Open these records in search →