VULNERABILITY INTELLIGENCE

CVE-2017-7648

CVSS score8.1 HIGH
EPSS probability1.68%
CISA KEVNot currently listed
Published2017-04-10
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

Weakness classification

  • CWE-798: Use of Hard-coded Credentials

Primary references