CVE-2018-19073: OS Command Injection
First published: Wed Nov 07 2018(Updated: )
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow attackers to execute arbitrary OS commands via shell metacharacters in the modelName, by leveraging /mnt/mtd/app/config/ProductConfig.xml write access.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Opticam I5 Application Firmware | =2.21.1.128 | |
| Opticam I5 System Firmware | =1.5.2.11 | |
| Opticam i5 | ||
| Foscam C2 Application Firmware | =2.72.1.32 | |
| Foscam C2 System Firmware | =1.11.1.8 | |
| Foscam C2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2018-19073?
CVE-2018-19073 is a vulnerability discovered in Foscam C2 devices and Opticam i5 devices.
What is the severity of CVE-2018-19073?
The severity of CVE-2018-19073 is critical with a CVSS score of 7.2.
How does CVE-2018-19073 allow attackers to execute arbitrary OS commands?
CVE-2018-19073 allows attackers to execute arbitrary OS commands by exploiting shell metacharacters in the modelName.
Which Foscam and Opticam versions are affected by CVE-2018-19073?
Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, as well as Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128 are affected by CVE-2018-19073.
Is Opticam i5 vulnerable to CVE-2018-19073?
No, Opticam i5 is not vulnerable to CVE-2018-19073.
- collector/nvd-index
- agent/author
- agent/severity
- agent/references
- agent/weakness
- agent/type
- agent/tags
- agent/description
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- vendor/opticam
- canonical/opticam i5 application firmware
- version/opticam i5 application firmware/2.21.1.128
- canonical/opticam i5 system firmware
- version/opticam i5 system firmware/1.5.2.11
- canonical/opticam i5
- vendor/foscam
- canonical/foscam c2 application firmware
- version/foscam c2 application firmware/2.72.1.32
- canonical/foscam c2 system firmware
- version/foscam c2 system firmware/1.11.1.8
- canonical/foscam c2