Vulnerability Spotlight: Foscam IP Video Camera Firmware Recovery Unsigned Image Vulnerability
Summary: Cisco Talos discovered an unsigned firmware image vulnerability (TALOS-2017-0378 / CVE-2017-2871) in the Foscam C1 Indoor HD Camera, which recovers from firmware corruption by looking for a TFTP server on its own subnet at reboot. An attacker on the same subnet could push a crafted firmware image without authentication and gain complete control of the device; Talos confirmed firmware versions 1.9.3.18 and 2.52.2.43 are affected, and Foscam has released an update.
What's compelling: The Foscam C1 is one of the most commonly deployed IP cameras and is often placed in sensitive locations to monitor homes, children and pets, so an unauthenticated firmware swap means an attacker on the same subnet controls what the camera sees and what it sends back.
Read the original at Cisco Talos ↗
- Topics
- Supply Chain & AppSec
- Mentions
- CVE-2017-2871
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026