CVE-2017-7648
High
Description
Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.
SeverityHigh
CVSS8.1
Exploit probability—
ProductFoscam C1
PublishedApr 10, 2017
First seenApr 10, 2017
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| foscam c1 | No range specified | — |
| foscam c1_lite | No range specified | — |
| foscam c2 | No range specified | — |
| foscam fi9800xe | No range specified | — |
| foscam fi9826p | No range specified | — |
| foscam fi9828p | No range specified | — |
| foscam fi9851p | No range specified | — |
| foscam fi9853ep | No range specified | — |
| foscam fi9901ep | No range specified | — |
| foscam fi9903p | No range specified | — |
| foscam fi9928p | No range specified | — |
| foscam r2 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.