PT-2018-17764 · Foscam · Foscam Cameras Fi9900Ep+42

Published 2018-07-09 · Updated 2018-09-10 · CVE-2018-6830

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Foscam Cameras C1 Lite V3 versions 2.82.2.33 and earlier Foscam Cameras C1 V3 versions 2.82.2.33 and earlier Foscam Cameras FI9800P V3 versions 2.84.2.33 and earlier Foscam Cameras FI9803P V4 versions 2.84.2.33 and earlier Foscam Cameras FI9851P V3 versions 2.84.2.33 and earlier Foscam Cameras FI9853EP V2 versions 2.84.2.33 and earlier Foscam Cameras FI9816P V3 versions 2.81.2.33 and earlier Foscam Cameras FI9821EP V2 versions 2.81.2.33 and earlier Foscam Cameras FI9821P V3 versions 2.81.2.33 and earlier Foscam Cameras FI9826P V3 versions 2.81.2.33 and earlier Foscam Cameras FI9831P V3 versions 2.81.2.33 and earlier Foscam Cameras C1 versions 2.52.2.47 and earlier Foscam Cameras C1 V2 versions 2.52.2.47 and earlier Foscam Cameras C1 Lite versions 2.52.2.47 and earlier Foscam Cameras C1 Lite V2 versions 2.52.2.47 and earlier Foscam Cameras FI9800P versions 2.54.2.47 and earlier Foscam Cameras FI9800P V2 versions 2.54.2.47 and earlier Foscam Cameras FI9803P V2 versions 2.54.2.47 and earlier Foscam Cameras FI9803P V3 versions 2.54.2.47 and earlier Foscam Cameras FI9851P V2 versions 2.54.2.47 and earlier Foscam Cameras FI9815P versions 2.51.2.47 and earlier Foscam Cameras FI9815P V2 versions 2.51.2.47 and earlier Foscam Cameras FI9816P versions 2.51.2.47 and earlier Foscam Cameras FI9816P V2 versions 2.51.2.47 and earlier Foscam Cameras R2 versions 2.71.1.59 and earlier Foscam Cameras R4 versions 2.71.1.59 and earlier Foscam Cameras C2 versions 2.72.1.59 and earlier Foscam Cameras FI9961EP versions 2.72.1.59 and earlier Foscam Cameras FI9900EP versions 2.74.1.59 and earlier Foscam Cameras FI9900P versions 2.74.1.59 and earlier Foscam Cameras FI9901EP versions 2.74.1.59 and earlier Foscam Cameras FI9928P versions 2.74.1.58 and earlier Foscam Cameras FI9803EP versions 2.22.2.31 and earlier Foscam Cameras FI9853EP versions 2.22.2.31 and earlier Foscam Cameras FI9803P versions 2.24.2.31 and earlier Foscam Cameras FI9851P versions 2.24.2.31 and earlier Foscam Cameras FI9821P V2 versions 2.21.2.31 and earlier Foscam Cameras FI9826P V2 versions 2.21.2.31 and earlier Foscam Cameras FI9831P V2 versions 2.21.2.31 and earlier Foscam Cameras FI9821EP versions 2.21.2.31 and earlier Foscam Cameras FI9821W V2 versions 2.11.1.120 and earlier Foscam Cameras FI9831W versions 2.11.1.120 and earlier Foscam Cameras FI9826W versions 2.11.1.120 and earlier Foscam Cameras FI9821P versions 2.11.1.120 and earlier Foscam Cameras FI9831P versions 2.11.1.120 and earlier Foscam Cameras FI9826P versions 2.11.1.120 and earlier Foscam Cameras FI9818W V2 versions 2.13.2.120 and earlier Foscam Cameras FI9805W versions 2.14.1.120 and earlier Foscam Cameras FI9804W versions 2.14.1.120 and earlier Foscam Cameras FI9804P versions 2.14.1.120 and earlier Foscam Cameras FI9805E versions 2.14.1.120 and earlier Foscam Cameras FI9805P versions 2.14.1.120 and earlier Foscam Cameras FI9828P versions 2.13.1.120 and earlier Foscam Cameras FI9828W versions 2.13.1.120 and earlier Foscam Cameras FI9828P V2 versions 2.11.1.133 and earlier

Description The issue allows remote attackers to delete arbitrary files via a .. (dot dot) in the URI path component. This is a directory traversal vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2018-6830

Affected Products

Foscam Cameras C1

Foscam Cameras C1 Lite

Foscam Cameras C1 Lite V2

Foscam Cameras C1 Lite V3

Foscam Cameras C1 V2

Foscam Cameras C1 V3

Foscam Cameras C2

Foscam Cameras Fi9800P

Foscam Cameras Fi9800P V2

Foscam Cameras Fi9800P V3

Foscam Cameras Fi9803Ep

Foscam Cameras Fi9803P V2

Foscam Cameras Fi9803P V3

Foscam Cameras Fi9803P V4

Foscam Cameras Fi9804P

Foscam Camera Fi9805E

Foscam Cameras Fi9815P

Foscam Cameras Fi9815P V2

Foscam Cameras Fi9816P

Foscam Cameras Fi9816P V2

Foscam Cameras Fi9816P V3

Foscam Cameras Fi9818W V2

Foscam Cameras Fi9821Ep

Foscam Cameras Fi9821Ep V2

Foscam Cameras Fi9821P V3

Foscam Cameras Fi9826P

Foscam Cameras Fi9826P V2

Foscam Cameras Fi9826P V3

Foscam Cameras Fi9828P

Foscam Cameras Fi9828P V2

Foscam Cameras Fi9831P

Foscam Cameras Fi9831P V2

Foscam Cameras Fi9831P V3

Foscam Cameras Fi9851P

Foscam Cameras Fi9851P V2

Foscam Cameras Fi9851P V3

Foscam Cameras Fi9853Ep

Foscam Cameras Fi9853Ep V2

Foscam Cameras Fi9900Ep

Foscam Cameras Fi9901Ep

Foscam Cameras Fi9928P

Foscam Cameras Fi9961Ep

Foscam Cameras R4

References · 4

• 🔥 https://blog.vdoo.com/2018/06/06/vdoo-has-found-major-vulnerabilities-in-foscam-cameras · Exploit
• https://foscam.com/company/securing-your-foscam-camera-important-notice.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-6830 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-6830 · Security Note