CVE-2017-2877: Foscam c1 Firmware

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

A missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10001 could allow an attacker to reset the user accounts to factory defaults, without authentication.

Affected products

• Foscam c1 Firmware: version 2.52.2.43 only

Published 2018-09-19. Last modified 2026-06-17.