CVE-2018-19069
First published: Wed Nov 07 2018(Updated: )
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for the root user with a password of toor.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Opticam I5 Application Firmware | =2.21.1.128 | |
| Opticam I5 System Firmware | =1.5.2.11 | |
| Opticam i5 | ||
| Foscam C2 System Firmware | =2.72.1.32 | |
| Foscam C2 Firmware | =1.11.1.8 | |
| Foscam C2 System Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2018-19069?
CVE-2018-19069 is considered to have a high severity due to unauthorized access to critical system features on affected devices.
How do I fix CVE-2018-19069?
To remediate CVE-2018-19069, you should update the firmware of your Foscam C2 or Opticam i5 devices to the latest versions provided by the manufacturer.
Which devices are affected by CVE-2018-19069?
CVE-2018-19069 affects Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, as well as Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128.
What is the nature of the vulnerability in CVE-2018-19069?
CVE-2018-19069 allows unauthorized users to enable Telnet access on affected devices through a specific CGI proxy command.
Is CVE-2018-19069 being actively exploited?
As of the latest reports, there is potential for exploitation of CVE-2018-19069, making it critical for users to apply necessary updates and security patches.
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- vendor/opticam
- canonical/opticam i5 application firmware
- version/opticam i5 application firmware/2.21.1.128
- canonical/opticam i5 system firmware
- version/opticam i5 system firmware/1.5.2.11
- canonical/opticam i5
- vendor/foscam
- canonical/foscam c2 system firmware
- version/foscam c2 system firmware/2.72.1.32
- canonical/foscam c2 firmware
- version/foscam c2 firmware/1.11.1.8