CVE-2018-19072 An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128....
MediumCVSS 5.5
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. /mnt/mtd/app has 0777 permissions, allowing local users to replace an archive file (within that directory) to control what is extracted to RAM at boot time.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opticam i5 application firmware | = 2.21.1.128 | No fix listed |
| opticam i5 system firmware | = 1.5.2.11 | No fix listed |
| foscam c2 application firmware | = 2.72.1.32 | No fix listed |
| foscam c2 system firmware | = 1.11.1.8 | No fix listed |
References
- sintonen.fi exploit third-party-advisory