CVEs-PoC/2017/CVE-2017-2873.md

### [CVE-2017-2873](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2873)
![](https://img.shields.io/static/v1?label=Product&message=Foscam%20C1%20Indoor%20HD%20Camera&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=Foscam%20Indoor%20IP%20Camera%20C1%20Series%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=OS%20Command%20Injection&color=brightgreen)

### Description

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SoftAP configuration resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability.

### POC

#### Reference
- https://talosintelligence.com/vulnerability_reports/TALOS-2017-0380

#### Github
No PoCs found on GitHub currently.