CVE-2018-6831

The setSystemTime function in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI9851P V3, and FI9853EP V2 2.84.2.33 and earlier, FI9816P V3, FI9821EP V2, FI9821P V3, FI9826P V3, and FI9831P V3 2.81.2.33 and earlier, C1, C1 V2, C1 Lite, and C1 Lite V2 2.52.2.47 and earlier, FI9800P, FI9800P V2, FI9803P V2, FI9803P V3, and FI9851P V2 2.54.2.47 and earlier, FI9815P, FI9815P V2, FI9816P, and FI9816P V2, 2.51.2.47 and earlier, R2 and R4 2.71.1.59 and earlier, C2 and FI9961EP 2.72.1.59 and earlier, FI9900EP, FI9900P, and FI9901EP 2.74.1.59 and earlier, FI9928P 2.74.1.58 and earlier, FI9803EP and FI9853EP 2.22.2.31 and earlier, FI9803P and FI9851P 2.24.2.31 and earlier, FI9821P V2, FI9826P V2, FI9831P V2, and FI9821EP 2.21.2.31 and earlier, FI9821W V2, FI9831W, FI9826W, FI9821P, FI9831P, and FI9826P 2.11.1.120 and earlier, FI9818W V2 2.13.2.120 and earlier, FI9805W, FI9804W, FI9804P, FI9805E, and FI9805P 2.14.1.120 and earlier, FI9828P, and FI9828W 2.13.1.120 and earlier, and FI9828P V2 2.11.1.133 and earlier allows remote authenticated users to execute arbitrary commands via a ';' in the ntpServer argument. NOTE: this issue exists because of an incomplete fix for CVE-2017-2849.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:foscam:c1_lite_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:c1_lite:3:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:foscam:c1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:c1:3:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:foscam:fi9800p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9800p:3:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:foscam:fi9821ep_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9821ep:2:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:foscam:fi9821p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9821p:3:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:foscam:fi9826p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9826p:3:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:foscam:fi9831p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9831p:3:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:foscam:c1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:c1:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:foscam:c1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:c1:2:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:foscam:c1_lite_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:c1_lite:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:foscam:c1_lite_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:c1_lite:2:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:foscam:fi9800p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9800p:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:foscam:fi9800p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9800p:2:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:foscam:fi9803p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9803p:2:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:foscam:fi9803p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9803p:3:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:foscam:fi9851p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9851p:2:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:foscam:fi9815p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9815p:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:foscam:fi9815p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9815p:2:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:foscam:fi9816p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9816p:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:foscam:fi9816p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9816p:2:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:foscam:r2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:r2:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:foscam:r4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:r4:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:foscam:c2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:c2:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:foscam:fi9961ep_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9961ep:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:foscam:fi9900ep_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9900ep:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:foscam:fi9900p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9900p:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:foscam:fi9901ep_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9901ep:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:foscam:fi9928p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9928p:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:foscam:fi9803ep_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9803ep:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:foscam:fi9853ep_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9853ep:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:foscam:fi9803p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9803p:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:o:foscam:fi9851p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9851p:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND
cpe:2.3:o:foscam:fi9821p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9821p:2:*:*:*:*:*:*:*

Configuration 34 (hide)

AND
cpe:2.3:o:foscam:fi9826p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9826p:2:*:*:*:*:*:*:*

Configuration 35 (hide)

AND
cpe:2.3:o:foscam:fi9831p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9831p:2:*:*:*:*:*:*:*

Configuration 36 (hide)

AND
cpe:2.3:o:foscam:fi9821ep_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9821ep:-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND
cpe:2.3:o:foscam:fi9821w_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9821w:2:*:*:*:*:*:*:*

Configuration 38 (hide)

AND
cpe:2.3:o:foscam:fi9831w_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9831w:-:*:*:*:*:*:*:*

Configuration 39 (hide)

AND
cpe:2.3:o:foscam:fi9826w_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9826w:-:*:*:*:*:*:*:*

Configuration 40 (hide)

AND
cpe:2.3:o:foscam:fi9821p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9821p:-:*:*:*:*:*:*:*

Configuration 41 (hide)

AND
cpe:2.3:o:foscam:fi9831p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9831p:-:*:*:*:*:*:*:*

Configuration 42 (hide)

AND
cpe:2.3:o:foscam:fi9826p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9826p:-:*:*:*:*:*:*:*

Configuration 43 (hide)

AND
cpe:2.3:o:foscam:fi9818w_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9818w:2:*:*:*:*:*:*:*

Configuration 44 (hide)

AND
cpe:2.3:o:foscam:fi9805w_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9805w:-:*:*:*:*:*:*:*

Configuration 45 (hide)

AND
cpe:2.3:o:foscam:fi9804w_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9804w:-:*:*:*:*:*:*:*

Configuration 46 (hide)

AND
cpe:2.3:o:foscam:fi9804p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9804p:-:*:*:*:*:*:*:*

Configuration 47 (hide)

AND
cpe:2.3:o:foscam:fi9805e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9805e:-:*:*:*:*:*:*:*

Configuration 48 (hide)

AND
cpe:2.3:o:foscam:fi9805p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9805p:-:*:*:*:*:*:*:*

Configuration 49 (hide)

AND
cpe:2.3:o:foscam:fi9828p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9828p:-:*:*:*:*:*:*:*

Configuration 50 (hide)

AND
cpe:2.3:o:foscam:fi9828w_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9828w:-:*:*:*:*:*:*:*

Configuration 51 (hide)

AND
cpe:2.3:o:foscam:fi9828p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:foscam:fi9828p:2:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-07-09 17:29

Updated : 2024-02-28 16:25


NVD link : CVE-2018-6831

Mitre link : CVE-2018-6831

CVE.ORG link : CVE-2018-6831


JSON object : View

Products Affected

foscam

  • fi9831w
  • fi9805w
  • fi9961ep_firmware
  • c1_lite_firmware
  • fi9821p
  • fi9851p
  • fi9901ep
  • fi9826p_firmware
  • fi9826w_firmware
  • fi9831w_firmware
  • fi9961ep
  • fi9826w
  • fi9826p
  • fi9800p
  • c1
  • fi9818w_firmware
  • fi9821w
  • c2_firmware
  • fi9818w
  • fi9804w_firmware
  • fi9821p_firmware
  • fi9900p
  • fi9851p_firmware
  • fi9900ep
  • fi9805w_firmware
  • fi9828p
  • fi9804p_firmware
  • fi9831p_firmware
  • fi9816p
  • fi9805p
  • fi9803p
  • fi9815p
  • fi9804w
  • fi9803ep_firmware
  • fi9805e_firmware
  • c1_firmware
  • fi9804p
  • fi9828p_firmware
  • fi9901ep_firmware
  • fi9821ep_firmware
  • fi9805p_firmware
  • r2_firmware
  • c2
  • r4_firmware
  • fi9900ep_firmware
  • fi9853ep_firmware
  • fi9805e
  • fi9800p_firmware
  • fi9821ep
  • fi9821w_firmware
  • fi9928p_firmware
  • fi9828w
  • fi9828w_firmware
  • fi9803p_firmware
  • fi9816p_firmware
  • r4
  • r2
  • fi9831p
  • fi9803ep
  • fi9853ep
  • fi9928p
  • fi9900p_firmware
  • fi9815p_firmware
  • c1_lite
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')