CVE-2018-19081 An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to execute arbitrary....
CriticalCVSS 9.8
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to execute arbitrary OS commands via the IPv4Address field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opticam i5 application firmware | = 2.21.1.128 | No fix listed |
| opticam i5 system firmware | = 1.5.2.11 | No fix listed |
| foscam c2 application firmware | = 2.72.1.32 | No fix listed |
| foscam c2 system firmware | = 1.11.1.8 | No fix listed |
References
- sintonen.fi exploit third-party-advisory