PT-2018-14780 · Foscam+1 · Foscam C2+1

Harry Sintonen · Publicado 2018-11-07 · Atualizado 2018-12-11 · CVE-2018-19067

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Foscam C2 versions 1.11.1.8 Foscam C2 Application Firmware versions 2.72.1.32 Opticam i5 versions 1.5.2.11 Opticam i5 Application Firmware versions 2.21.1.128

Description An issue was discovered where there is a hardcoded Ak47@99 password for the factory~ account.

Recommendations For Foscam C2 with System Firmware 1.11.1.8, change the hardcoded password for the factory~ account. For Foscam C2 with Application Firmware 2.72.1.32, update the firmware to remove the hardcoded Ak47@99 password. For Opticam i5 with System Firmware 1.5.2.11, change the hardcoded password for the factory~ account. For Opticam i5 with Application Firmware 2.21.1.128, update the firmware to remove the hardcoded Ak47@99 password.

Exploit

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2018-19067

Produtos afetados

Foscam C2

Opticam I5

Referências · 3

• 🔥 https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt · Exploit
• https://osv.dev/vulnerability/CVE-2018-19067 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-19067 · Nota de Segurança