CVE-2017-14743

CVE-2017-14743 describes an unauthenticated SQL injection vulnerability in Faleemi FSC-880 IP cameras (firmware 00.01.01.0048P2). An attacker can exploit this by injecting malicious SQL into the Username element of an XML document sent to the /onvif/device_service endpoint, potentially leading to the disclosure of sensitive information like the admin password. This vulnerability carries a high CVSS score of 8.1, indicating a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.