PT-2018-14788 · Opticam+1 · Opticam I5 Application Firmware+3

Harry Sintonen · Publicado 2018-11-07 · Atualizado 2018-12-11 · CVE-2018-19075

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Foscam C2 versions 1.11.1.8 Foscam C2 Application Firmware versions 2.72.1.32 Opticam i5 versions 1.5.2.11 Opticam i5 Application Firmware versions 2.21.1.128

Description An issue in the firewall feature of the affected devices makes it easier for remote attackers to ascertain credentials and firewall rules. This is because the device returns different error codes for invalid credentials (error -2) and rule-based blocking (error -8), potentially allowing attackers to deduce the presence of specific rules or credentials.

Recommendations For Foscam C2 version 1.11.1.8, consider disabling the firewall feature until a patch is available. For Foscam C2 Application Firmware version 2.72.1.32, restrict access to the device to minimize the risk of exploitation. For Opticam i5 version 1.5.2.11, avoid using the firewall feature in its current state to prevent potential credential exposure. For Opticam i5 Application Firmware version 2.21.1.128, limit remote access to reduce the risk of attackers exploiting the issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-19075

Produtos afetados

Foscam C2

Foscam C2 Application Firmware

Opticam I5

Opticam I5 Application Firmware

Referências · 3

• 🔥 https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-19075 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-19075 · Aviso do Fabricante