CVE-2018-19082 An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to conduct stack-base...
CriticalCVSS 9.8
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to conduct stack-based buffer overflow attacks via the IPv4Address field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opticam i5 application firmware | = 2.21.1.128 | No fix listed |
| opticam i5 system firmware | = 1.5.2.11 | No fix listed |
| foscam c2 application firmware | = 2.72.1.32 | No fix listed |
| foscam c2 system firmware | = 1.11.1.8 | No fix listed |
References
- sintonen.fi exploit third-party-advisory