Foscam C1 Webcam CVE-2016-8731 Hard Coded Credentials Authentication Bypass Vulnerability

Bugtraq ID:	99193
Class:	Design Error
CVE:	CVE-2016-8731
Remote:	Yes
Local:	No
Published:	Jun 21 2017 12:00AM
Updated:	Jun 21 2017 12:00AM
Credit:	Richard Harman and Dave McDaniel of Cisco Talos
Vulnerable:	Foscam C1 Webcam 1.9.1.12
Not Vulnerable:

Foscam C1 Webcam CVE-2016-8731 Hard Coded Credentials Authentication Bypass Vulnerability

Foscam C1 Webcam is prone to an authentication-bypass vulnerability.

An attacker can exploit this issue to gain unauthorized access or obtain sensitive information; this may lead to further attacks.

Foscam C1 Webcam CVE-2016-8731 Hard Coded Credentials Authentication Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Foscam C1 Webcam CVE-2016-8731 Hard Coded Credentials Authentication Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Foscam C1 Webcam CVE-2016-8731 Hard Coded Credentials Authentication Bypass Vulnerability

References:

• foscam Homepage ( Shenzhen Foscam Intelligent Technology)
  
• Foscam C1 Webcam FTP Hard Coded Password Vulnerability (talosintelligence)
  
• Vulnerability Spotlight: Multiple Foscam C1 Vulnerabilities Come in to Focus (talosintelligence)