PT-2018-14793 · Foscam · Foscam Opticam I5

Harry Sintonen · CVE-2018-19080 · Publicado 2018-11-07 · Atualizado 2018-12-13

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128

Description An issue was discovered that allows unauthenticated persistent XSS through the ONVIF devicemgmt SetHostname method.

Recommendations For Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128, consider disabling the ONVIF devicemgmt SetHostname method until a patch is available to prevent exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-19080

Produtos afetados

Foscam Opticam I5

Referências · 3

• 🔥 https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt · Exploit
• https://osv.dev/vulnerability/CVE-2018-19080 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-19080 · Nota de Segurança