PT-2018-14788 · Opticam+1 · Opticam I5 Application Firmware+3

Harry Sintonen · Published 2018-11-07 · Updated 2018-12-11 · CVE-2018-19075

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Foscam C2 versions 1.11.1.8 Foscam C2 Application Firmware versions 2.72.1.32 Opticam i5 versions 1.5.2.11 Opticam i5 Application Firmware versions 2.21.1.128

Description An issue in the firewall feature of the affected devices makes it easier for remote attackers to ascertain credentials and firewall rules. This is because the device returns different error codes for invalid credentials (error -2) and rule-based blocking (error -8), potentially allowing attackers to deduce the presence of specific rules or credentials.

Recommendations For Foscam C2 version 1.11.1.8, consider disabling the firewall feature until a patch is available. For Foscam C2 Application Firmware version 2.72.1.32, restrict access to the device to minimize the risk of exploitation. For Opticam i5 version 1.5.2.11, avoid using the firewall feature in its current state to prevent potential credential exposure. For Opticam i5 Application Firmware version 2.21.1.128, limit remote access to reduce the risk of attackers exploiting the issue.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-19075

Affected Products

Foscam C2

Foscam C2 Application Firmware

Opticam I5

Opticam I5 Application Firmware

References · 3

• 🔥 https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-19075 · Security Note
• https://osv.dev/vulnerability/CVE-2018-19075 · Vendor Advisory