CVE-2017-18377: GoAhead Wireless IP Camera Wificam Firmware

Critical severity, CVSS 9.8. EPSS: 6.8% chance of exploitation in the next 30 days.

An issue was discovered on Wireless IP Camera (P2P) WIFICAM cameras. There is Command Injection in the set_ftp.cgi script via shell metacharacters in the pwd variable, as demonstrated by a set_ftp.cgi?svr=192.168.1.1&port=21&user=ftp URI.

Affected products

• GoAhead Wireless IP Camera Wificam Firmware: affected versions not specified

Published 2019-06-11. Last modified 2026-06-17.