CVE-2017-18377: Command Injection
An issue was discovered on Wireless IP Camera (P2P) WIFICAM cameras. There is Command Injection in the setftp.cgi script via shell metacharacters in the pwd variable, as demonstrated by a setftp.cgi?svr=192.168.1.1&port=21&user=ftp URI.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-18377?
CVE-2017-18377 has a medium severity rating due to its ability to allow command injection in affected devices.
How do I fix CVE-2017-18377?
To fix CVE-2017-18377, update the firmware of the Wireless IP Camera to the latest version provided by the manufacturer.
Which devices are affected by CVE-2017-18377?
CVE-2017-18377 affects Wireless IP Camera (P2P) WIFICAM devices using vulnerable firmware.
Can CVE-2017-18377 lead to unauthorized access?
Yes, CVE-2017-18377 can lead to unauthorized remote command execution on the affected cameras.
What is the nature of the vulnerability in CVE-2017-18377?
The nature of the vulnerability in CVE-2017-18377 is command injection through improper handling of user input in the set_ftp.cgi script.