CVE-2018-19075

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The firewall feature makes it easier for remote attackers to ascertain credentials and firewall rules because invalid credentials lead to error -2, whereas rule-based blocking leads to error -8.

Score

CVSS 3.0 5.3 Medium

Status

Modified - cve@mitre.org

Published

2018-11-07

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• C2 Application Firmware (Foscam)
• C2 System Firmware (Foscam)
• I5 Application Firmware (Opticam)
• I5 System Firmware (Opticam)

References

• https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt