CVE-2018-19071
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. /mnt/mtd/boot.sh has 0777 permissions, allowing local users to control the commands executed at system start-up.
- Score
- CVSS 3.0 7.8 High
- Status
- Modified - cve@mitre.org
- Published
- 2018-11-07
- Last modified
- 2024-08-05
- Weaknesses
- CWE-732
Affected products
- C2 Application Firmware (Foscam)
- C2 System Firmware (Foscam)
- I5 Application Firmware (Opticam)
- I5 System Firmware (Opticam)
References
- https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
