SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2016-8731

Hard-coded FTP credentials (r:r) are included in the Foscam C1 running firmware 1.9.1.12.

CRITICAL 9.8EPSS 2.65%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (2.65%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Hard-coded FTP credentials (r:r) are included in the Foscam C1 running firmware 1.9.1.12. Knowledge of these credentials would allow remote access to any cameras found on the internet that do not have port 50021 blocked by an intermediate device.

CVSS 3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
2.65% probability · 85th percentile
CISA KEV
Not listed
Weakness
CWE-798
Affected
foscam/c1 webcam firmware
Source
talos-cna@cisco.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.