Back to Database
Status published
High
CVE-2017-7648
Foscam networked devices use the same hardcoded SSL private key...
Vulnerability Description
Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-7648
Credits & Attribution
No credits recorded in the NVD database.
More from foscam
View All →CVE-2022-28743
Time-of-check Time-of-use (TOCTOU) Race Condition vulerability in Foscam R2C IP...
Critical
9.1
CVE-2021-43517
FOSCAM Camera FI9805E with firmware V4.02.R12.00018510.10012.143900.00000 contains a backdoor that...
Critical
9.8
CVE-2018-6832
Stack-based buffer overflow in the getSWFlag function in Foscam Cameras...
High
7.5
CVE-2018-6831
The setSystemTime function in Foscam Cameras C1 Lite V3, and...
High
7.2
CVE-2018-6830
Directory traversal vulnerability in Foscam Cameras C1 Lite V3, and...
High
7.5
Affected Vendor
foscam
View all reports →Affected Software
c1, c1 lite, c2, fi9800xe, fi9826p, fi9828p, fi9851p, fi9853ep, fi9901ep, fi9903p, fi9928p, r2
Vulnerable Versions:
Unknown
Timeline
Official Publish:
April 10th, 2017
Last Modified:
September 16th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.