Critical (9.8) in foscam c1 hd indoor camera firmware. EPSS 26% chance of exploitation in the next 30 days.
An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera. A specially crafted http request can cause a stack-based buffer overflow resulting in overwriting arbitrary data on the stack frame. An attacker can simply send an http request to the device to trigger this vulnerability.
Severity
CVSS 3.1
9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
26% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-11-01)