Foscam vulnerabilities
65 vulnerabilities
Known vulnerabilities in Foscam products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 51 products.
Products
50 of 51- C2 Application20 vulnerabilities
- C2 System20 vulnerabilities
- C118 vulnerabilities
- Indoor IP Camera C1 Series17 vulnerabilities
- C1 Indoor Hd Camera16 vulnerabilities
- Foscam C1 Indoor HD Camera7 vulnerabilities
- Foscam Indoor IP Camera C1 Series5 vulnerabilities
- Fi9805E4 vulnerabilities
- C1 Lite3 vulnerabilities
- C23 vulnerabilities
- Fi9800P3 vulnerabilities
- Fi9803Ep3 vulnerabilities
- Fi9803P3 vulnerabilities
- Fi9804P3 vulnerabilities
- Fi9804W3 vulnerabilities
- Fi9805P3 vulnerabilities
- Fi9805W3 vulnerabilities
- Fi9815P3 vulnerabilities
- Fi9816P3 vulnerabilities
- Fi9818W3 vulnerabilities
- Fi9821Ep3 vulnerabilities
- Fi9821P3 vulnerabilities
- Fi9821W3 vulnerabilities
- Fi9826P3 vulnerabilities
- Fi9826W3 vulnerabilities
- Fi9828P3 vulnerabilities
- Fi9828W3 vulnerabilities
- Fi9831P3 vulnerabilities
- Fi9831W3 vulnerabilities
- Fi9851P3 vulnerabilities
- Fi9853Ep3 vulnerabilities
- Fi9900Ep3 vulnerabilities
- Fi9900P3 vulnerabilities
- Fi9901Ep3 vulnerabilities
- Fi9928P3 vulnerabilities
- Fi9961Ep3 vulnerabilities
- R23 vulnerabilities
- R43 vulnerabilities
- Fi8919W2 vulnerabilities
- Indoor IP Camera2 vulnerabilities
- C1 Hd Indoor Camera1 vulnerabilities
- C1 Webcam1 vulnerabilities
- Fi86201 vulnerabilities
- Foscam Video Management System1 vulnerabilities
- H.264 Hi3510\/11\/12 Ip Camera1 vulnerabilities
- Ip Camera1 vulnerabilities
- R2C Application1 vulnerabilities
- R2C System1 vulnerabilities
- Wireless Ip Camera1 vulnerabilities
- Fi9800Xe0 vulnerabilities
CVE-2018-19065foscamc2_application_firmware+3
EPSS score1.58%
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The exported device configuration is encrypted with the hardcoded BpP+2R9*Q password in some cases.CVE-2018-19081foscamc2_application_firmware+3EPSS score4.97%
An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to execute arbitrary OS commands via the IPv4Address field.CVE-2018-19075foscamc2_application_firmware+3EPSS score1.69%
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The firewall feature makes it easier for remote attackers to ascertain credentials and firewall rules because invalid credentials lead to error -2, whereas rule-based blocking leads to error -8.CVE-2018-19071foscamc2_application_firmware+3EPSS score0.39%
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. /mnt/mtd/boot.sh has 0777 permissions, allowing local users to control the commands executed at system start-up.CVE-2018-19079foscamc2_application_firmware+3EPSS score1.52%
An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SystemReboot method allows unauthenticated reboot.CVE-2018-19076foscamc2_application_firmware+3EPSS score1.85%
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The FTP and RTSP services make it easier for attackers to conduct brute-force authentication attacks, because failed-authentication limits apply only to HTTP (not FTP or RTSP).CVE-2018-19077foscamc2_application_firmware+3EPSS score2.19%
An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. RtspServer allows remote attackers to cause a denial of service (daemon hang or restart) via a negative integer in the RTSP Content-Length header.CVE-2018-19082foscamc2_application_firmware+3EPSS score2.32%
An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to conduct stack-based buffer overflow attacks via the IPv4Address field.CVE-2018-19063foscamc2_application_firmware+3EPSS score1.99%
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The admin account has a blank password.CVE-2018-19078foscamc2_application_firmware+3EPSS score1.59%
An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The response to an ONVIF media GetStreamUri request contains the administrator username and password.CVE-2018-19069foscamc2_application_firmware+3EPSS score1.99%
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for the root user with a password of toor.CVE-2018-19067foscamc2_application_firmware+3EPSS score2.04%
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. There is a hardcoded Ak47@99 password for the factory~ account.CVE-2018-19080foscamc2_application_firmware+3EPSS score0.89%
An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetHostname method allows unauthenticated persistent XSS.CVE-2018-19072foscamc2_application_firmware+3EPSS score0.35%
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. /mnt/mtd/app has 0777 permissions, allowing local users to replace an archive file (within that directory) to control what is extracted to RAM at boot time.CVE-2018-19073foscamc2_application_firmware+3EPSS score1.95%
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow attackers to execute arbitrary OS commands via shell metacharacters in the modelName, by leveraging /mnt/mtd/app/config/ProductConfig.xml write access.CVE-2018-19074foscamc2_application_firmware+3EPSS score1.29%
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The firewall has no effect except for blocking port 443 and partially blocking port 88.CVE-2018-19070foscamc2_application_firmware+3EPSS score4.44%
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow remote attackers to execute arbitrary OS commands via shell metacharacters in the usrName parameter of a CGIProxy.fcgi addAccount action.CVE-2018-19066foscamc2_application_firmware+3EPSS score1.58%
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The exported device configuration is encrypted with the hardcoded Pxift* password in some cases.CVE-2018-19068foscamc2_application_firmware+3EPSS score1.01%
An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for hidden factory credentials.CVE-2018-19064foscamc2_application_firmware+3EPSS score1.99%
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ftpuser1 account has a blank password, which cannot be changed.