CVE-2018-19064
First published: Wed Nov 07 2018(Updated: )
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ftpuser1 account has a blank password, which cannot be changed.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Opticam I5 Application Firmware | =2.21.1.128 | |
| Opticam I5 System Firmware | =1.5.2.11 | |
| Opticam i5 | ||
| Foscam C2 System Firmware | =2.72.1.32 | |
| Foscam C2 Firmware | =1.11.1.8 | |
| Foscam C2 System Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2018-19064?
CVE-2018-19064 is classified as a critical vulnerability due to the presence of a default blank password for an account.
How do I fix CVE-2018-19064?
To fix CVE-2018-19064, it is recommended to update the firmware of affected Foscam C2 and Opticam i5 devices to the latest version.
Which devices are affected by CVE-2018-19064?
CVE-2018-19064 affects Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, as well as Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128.
Is it safe to use the affected devices without addressing CVE-2018-19064?
Using the affected devices without addressing CVE-2018-19064 poses a significant security risk, as unauthorized access is possible due to the default blank password.
Can I change the default password for the ftpuser1 account in CVE-2018-19064?
No, the ftpuser1 account in CVE-2018-19064 has a blank password that cannot be changed, making it vulnerable.
- agent/author
- agent/weakness
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/severity
- agent/references
- vendor/opticam
- canonical/opticam i5 application firmware
- version/opticam i5 application firmware/2.21.1.128
- canonical/opticam i5 system firmware
- version/opticam i5 system firmware/1.5.2.11
- canonical/opticam i5
- vendor/foscam
- canonical/foscam c2 system firmware
- version/foscam c2 system firmware/2.72.1.32
- canonical/foscam c2 firmware
- version/foscam c2 firmware/1.11.1.8