PT-2018-14795 · Foscam · Foscam Opticam I5

Harry Sintonen · Publicado 2018-11-07 · Atualizado 2020-08-24 · CVE-2018-19082

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128

Description A remote stack-based buffer overflow issue was discovered, allowing attackers to conduct attacks via the IPv4Address field in the ONVIF devicemgmt SetDNS method.

Recommendations For Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128, consider restricting access to the ONVIF devicemgmt SetDNS method until a patch is available. Avoid using the IPv4Address field in the affected method to minimize the risk of exploitation.

Exploit

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2018-19082

Produtos afetados

Foscam Opticam I5

Referências · 3

• 🔥 https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-19082 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-19082 · Aviso do Fabricante