Vulnerability CVE-2018-19076
Published: 2018-11-07

Description:
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The FTP and RTSP services make it easier for attackers to conduct brute-force authentication attacks, because failed-authentication limits apply only to HTTP (not FTP or RTSP).

Type:

CWE-287

 (Improper Authentication)

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
Opticam -> I5 application firmware 
Opticam -> I5 system firmware 
Foscam -> C2 application firmware 
Foscam -> C2 system firmware 

 References:
https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
Copyright 2024, cxsecurity.com

 

Back to Top