CVE-2017-5675

CVE-2017-5675 is a high-severity command-injection vulnerability affecting custom-built GoAhead web servers used in Foscam, Vstarcam, and various white-label IP camera models. An authenticated attacker can inject arbitrary commands into the receiver1 field of the mail-sending form (mail.htm), which are then executed with root privileges. This allows for complete compromise of the affected device, leading to high confidentiality, integrity, and availability impacts. There is no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this vulnerability.