CVE-2018-19070: OS Command Injection
First published: Wed Nov 07 2018(Updated: )
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow remote attackers to execute arbitrary OS commands via shell metacharacters in the usrName parameter of a CGIProxy.fcgi addAccount action.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Opticam I5 Application Firmware | =2.21.1.128 | |
| Opticam I5 System Firmware | =1.5.2.11 | |
| Opticam i5 | ||
| Foscam C2 Application Firmware | =2.72.1.32 | |
| Foscam C2 System Firmware | =1.11.1.8 | |
| Foscam C2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2018-19070?
The severity of CVE-2018-19070 is critical with a severity value of 7.2.
How does CVE-2018-19070 affect Foscam C2 devices?
CVE-2018-19070 allows remote attackers to execute arbitrary OS commands on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32.
How does CVE-2018-19070 affect Opticam i5 devices?
CVE-2018-19070 allows remote attackers to execute arbitrary OS commands on Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128.
What is the reference for CVE-2018-19070?
The reference for CVE-2018-19070 is https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
What is the Common Weakness Enumeration (CWE) ID for CVE-2018-19070?
The Common Weakness Enumeration (CWE) ID for CVE-2018-19070 is 78.
- collector/nvd-index
- vendor/opticam
- canonical/opticam i5 application firmware
- version/opticam i5 application firmware/2.21.1.128
- canonical/opticam i5 system firmware
- version/opticam i5 system firmware/1.5.2.11
- canonical/opticam i5
- vendor/foscam
- canonical/foscam c2 application firmware
- version/foscam c2 application firmware/2.72.1.32
- canonical/foscam c2 system firmware
- version/foscam c2 system firmware/1.11.1.8
- canonical/foscam c2