PT-2018-14791 · Foscam · Foscam Opticam I5

Publicado 2018-11-07 · Atualizado 2019-10-03 · CVE-2018-19078

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128

Description An issue was discovered where the response to an ONVIF media GetStreamUri request contains the administrator username and password.

Recommendations For Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128, consider changing the administrator password and restricting access to the ONVIF media GetStreamUri request until a patch is available.

Exploit

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2018-19078

Produtos afetados

Foscam Opticam I5

Referências · 3

• 🔥 https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-19078 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-19078 · Aviso do Fabricante