CVE-2018-19072
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. /mnt/mtd/app has 0777 permissions, allowing local users to replace an archive file (within that directory) to control what is extracted to RAM at boot time.
- Score
- CVSS 3.0 5.5 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2018-11-07
- Last modified
- 2024-08-05
- Weaknesses
- CWE-732
Affected products
- C2 Application Firmware (Foscam)
- C2 System Firmware (Foscam)
- I5 Application Firmware (Opticam)
- I5 System Firmware (Opticam)
References
- https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
