PT-2018-14779 · Foscam+1 · Foscam C2+1

Harry Sintonen · Publicado 2018-11-07 · Atualizado 2018-12-11 · CVE-2018-19066

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Foscam C2 versions 1.11.1.8 Foscam C2 Application Firmware versions 2.72.1.32 Opticam i5 versions 1.5.2.11 Opticam i5 Application Firmware versions 2.21.1.128

Description An issue was discovered where the exported device configuration is encrypted with a hardcoded password Pxift* in some cases.

Recommendations For Foscam C2 version 1.11.1.8, update the System Firmware to a version that does not use the hardcoded Pxift* password. For Foscam C2 Application Firmware version 2.72.1.32, update the Application Firmware to a version that does not use the hardcoded Pxift* password. For Opticam i5 version 1.5.2.11, update the System Firmware to a version that does not use the hardcoded Pxift* password. For Opticam i5 Application Firmware version 2.21.1.128, update the Application Firmware to a version that does not use the hardcoded Pxift* password.

Exploit

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2018-19066

Produtos afetados

Foscam C2

Opticam I5

Referências · 3

• 🔥 https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-19066 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-19066 · Aviso do Fabricante