CVE-2018-19075

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The firewall feature makes it easier for remote attackers to ascertain credentials and firewall rules because invalid credentials lead to error -2, whereas rule-based blocking leads to error -8.

CVSS v3.0

5.3 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

1.69% chance of exploitation in the next 30 days, 75th percentile

Published

2018-11-07

Updated

2024-08-05

Proof-of-concept exploits (1)

• https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt

References

• CVE Record
• NVD entry

Related

• CVE-2018-19074
• CVE-2018-19076
• CVE-2018-19073
• CVE-2018-19077
• CVE-2018-19072
• CVE-2018-19078