CVE-2018-19064

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ftpuser1 account has a blank password, which cannot be changed.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:opticam:i5_application_firmware:2.21.1.128:*:*:*:*:*:*:*
cpe:2.3:o:opticam:i5_system_firmware:1.5.2.11:*:*:*:*:*:*:*
cpe:2.3:h:opticam:i5:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:foscam:c2_application_firmware:2.72.1.32:*:*:*:*:*:*:*
cpe:2.3:o:foscam:c2_system_firmware:1.11.1.8:*:*:*:*:*:*:*
cpe:2.3:h:foscam:c2:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:57

Type Values Removed Values Added
References () https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt - Exploit, Third Party Advisory () https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt - Exploit, Third Party Advisory

Information

Published : 2018-11-07 18:29

Updated : 2024-11-21 03:57


NVD link : CVE-2018-19064

Mitre link : CVE-2018-19064

CVE.ORG link : CVE-2018-19064


JSON object : View

Products Affected

opticam

  • i5_application_firmware
  • i5_system_firmware
  • i5

foscam

  • c2
  • c2_application_firmware
  • c2_system_firmware
CWE
CWE-521

Weak Password Requirements