CVE-2018-19074: foscam c2_application_firmware
Vulnerability summary
CVE-2018-19074 is a high (CVSS 7.5) vulnerability in foscam c2_application_firmware. EPSS estimates a 1.29% chance of exploitation in the next 30 days, higher than 70% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 07-11-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The firewall has no effect except for blocking port 443 and partially blocking port 88.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.29%
Chance of exploitation in the next 30 days
Percentile
70%
Versus all other CVEs
30-day change
+0.03 pp
From 1.27% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (sintonen.fi)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Foscam2 products
- c2_application_firmware2.72.1.32
- c2_system_firmware1.11.1.8
Opticam2 products
- i5_application_firmware2.21.1.128
- i5_system_firmware1.5.2.11
2 vendors · 4 products
References
1 links- sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txtX Refsource MISCExploitThird Party Advisory