CVE-2017-7648: Foscam c1

High severity, CVSS 8.1. EPSS: 1.7% chance of exploitation in the next 30 days.

Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

Affected products

• Foscam c1: any version
• Foscam c1 Lite: any version
• Foscam c2: any version
• Foscam FI9800XE: any version
• Foscam FI9826P: any version
• Foscam FI9828P: any version
• Foscam FI9851P: any version
• Foscam FI9853EP: any version
• Foscam FI9901EP: any version
• Foscam FI9903P: any version
• Foscam FI9928P: any version
• Foscam r2: any version

Published 2017-04-10. Last modified 2026-06-17.