Foscam vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2022-28743 Time-of-check Time-of-use (TOCTOU) Race Condition vulerability in Foscam R2C IP camera running System FW <= 1.13.1.6, and Application FW <= 2.91.2.66, allows anCritical 9.1 · Apr 21, 2022
• CVE-2021-43517 FOSCAM Camera FI9805E with firmware V4.02.R12.00018510.10012.143900.00000 contains a backdoor that opens Telnet port when special command is sent on port 9530.Critical 9.8 · Apr 8, 2022
• CVE-2013-2574 An Access vulnerability exists in FOSCAM IP Camera FI8620 due to insufficient access restrictions in the /tmpfs/ and /log/ directories, which could let a maliciHigh 7.5 · Jan 29, 2020
• CVE-2017-2877 A missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43.Critical 9.8 · Sep 19, 2018
• CVE-2017-2876 An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43.High 7.5 · Sep 19, 2018
• CVE-2017-2873 An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2High 7.2 · Sep 19, 2018
• CVE-2017-2878 An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.4High 7.5 · Sep 19, 2018
• CVE-2017-2875 An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43.Critical 9.1 · Sep 19, 2018
• CVE-2017-2855 An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43.High 8.1 · Sep 19, 2018
• CVE-2017-2872 Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43.High 7.2 · Sep 17, 2018
• CVE-2017-2857 An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43.High 8.1 · Sep 17, 2018
• CVE-2017-2856 An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43.High 8.1 · Sep 17, 2018
• CVE-2017-2854 An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43.High 8.1 · Sep 17, 2018
• CVE-2017-2874 An information disclosure vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43.High 7.5 · Sep 17, 2018
• CVE-2018-6832 Stack-based buffer overflow in the getSWFlag function in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI985High 7.5 · Jul 9, 2018
• CVE-2018-6831 The setSystemTime function in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI9851P V3, and FI9853EP V2 2.84High 7.2 · Jul 9, 2018
• CVE-2018-6830 Directory traversal vulnerability in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI9851P V3, and FI9853EP High 7.5 · Jul 9, 2018
• CVE-2017-2833 An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2High 7.5 · Apr 24, 2018
• CVE-2017-2832 An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2High 7.2 · Apr 24, 2018
• CVE-2017-2851 In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can cause a buffer overflowHigh 7.2 · Jun 29, 2017
• CVE-2017-2850 In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to injHigh 8.8 · Jun 29, 2017
• CVE-2017-2849 In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to injHigh 8.8 · Jun 29, 2017
• CVE-2017-2848 In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to injHigh 8.8 · Jun 29, 2017
• CVE-2017-2847 In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to injHigh 8.8 · Jun 29, 2017
• CVE-2017-2846 In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to injHigh 8.8 · Jun 29, 2017