PT-2018-14790 · Foscam · Foscam Opticam I5

Publicado 2018-11-07 · Atualizado 2018-12-13 · CVE-2018-19077

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128

Description A denial of service issue was discovered, allowing remote attackers to cause the daemon to hang or restart via a negative integer in the Content-Length header of the RTSP protocol.

Recommendations For Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128, consider restricting access to the RtspServer until a patch is available. As a temporary workaround, avoid using negative integers in the Content-Length header to minimize the risk of exploitation.

Exploit

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2018-19077

Produtos afetados

Foscam Opticam I5

Referências · 3

• 🔥 https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt · Exploit
• https://osv.dev/vulnerability/CVE-2018-19077 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-19077 · Nota de Segurança