CVEvulnerability

CVE-2017-7648

8.1 HIGH Published 2017-04-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-04-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.1 HIGH — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-798

Description

Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

Affected configurations

• foscam c1 • foscam c1 lite • foscam c2 • foscam fi9800xe • foscam fi9826p • foscam fi9828p • foscam fi9851p • foscam fi9853ep • foscam fi9901ep • foscam fi9903p • foscam fi9928p • foscam r2

Related

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References