Vulnerability Details CVE-2018-19075
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The firewall feature makes it easier for remote attackers to ascertain credentials and firewall rules because invalid credentials lead to error -2, whereas rule-based blocking leads to error -8.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.4%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
References
Products affected by CVE-2018-19075
-
cpe:2.3:h:foscam:c2:-
-
cpe:2.3:h:opticam:i5:-
-
cpe:2.3:o:foscam:c2_application_firmware:2.72.1.32
-
cpe:2.3:o:foscam:c2_system_firmware:1.11.1.8
-
cpe:2.3:o:opticam:i5_application_firmware:2.21.1.128
-
cpe:2.3:o:opticam:i5_system_firmware:1.5.2.11