High severity · published Apr 10, 2017
CVE-2017-7648
Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection…
8.1
CVSS
1.7%
EPSS
No
On KEV
Description
Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
C1
C1 · Foscam
All versions, or not specified · source: NVD
CL
C1 Lite · Foscam
All versions, or not specified · source: NVD
C2
C2 · Foscam
All versions, or not specified · source: NVD
FI
Fi9800xe · Foscam
All versions, or not specified · source: NVD
FI
Fi9826p · Foscam
All versions, or not specified · source: NVD
FI
Fi9828p · Foscam
All versions, or not specified · source: NVD
FI
Fi9851p · Foscam
All versions, or not specified · source: NVD
FI
Fi9853ep · Foscam
All versions, or not specified · source: NVD
FI
Fi9901ep · Foscam
All versions, or not specified · source: NVD
FI
Fi9903p · Foscam
All versions, or not specified · source: NVD
FI
Fi9928p · Foscam
All versions, or not specified · source: NVD
R2
R2 · Foscam
All versions, or not specified · source: NVD