Page 2 of 20 results (0.013 seconds)

CVSS: 7.8EPSS: 0%CPEs: 6EXPL: 1

CVE-2018-19079

https://notcve.org/view.php?id=CVE-2018-19079

07 Nov 2018 — An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SystemReboot method allows unauthenticated reboot. Se ha descubierto un problema en dispositivos Foscam Opticam i5 con firmware del sistema 1.5.2.11 y firmware de aplicación 2.21.1.128. El método ONVIF devicemgmt SystemReboot permite el reinicio no autenticado. • https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt • CWE-306: Missing Authentication for Critical Function CWE-862: Missing Authorization •

CVSS: 5.3EPSS: 0%CPEs: 6EXPL: 1

CVE-2018-19075

https://notcve.org/view.php?id=CVE-2018-19075

07 Nov 2018 — An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The firewall feature makes it easier for remote attackers to ascertain credentials and firewall rules because invalid credentials lead to error -2, whereas rule-based blocking leads to error -8. Se ha descubierto un problema en dispositivos Foscam C2 con firmware del sistema 1.11.1.8 y firmware de aplicación 2... • https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 1

CVE-2018-19074

https://notcve.org/view.php?id=CVE-2018-19074

07 Nov 2018 — An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The firewall has no effect except for blocking port 443 and partially blocking port 88. Se ha descubierto un problema en dispositivos Foscam C2 con firmware del sistema 1.11.1.8 y firmware de aplicación 2.72.1.32, así como dispositivos Opticam i5 con firmware del sistema 1.5.2.11 y firmware de aplicación 2.21.... • https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt •

CVSS: 5.5EPSS: 0%CPEs: 6EXPL: 1

CVE-2018-19072

https://notcve.org/view.php?id=CVE-2018-19072

07 Nov 2018 — An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. /mnt/mtd/app has 0777 permissions, allowing local users to replace an archive file (within that directory) to control what is extracted to RAM at boot time. Se ha descubierto un problema en dispositivos Foscam C2 con firmware del sistema 1.11.1.8 y firmware de aplicación 2.72.1.32, así como dispositivos Optica... • https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt • CWE-732: Incorrect Permission Assignment for Critical Resource •

CVSS: 9.0EPSS: 2%CPEs: 6EXPL: 1

CVE-2018-19070

https://notcve.org/view.php?id=CVE-2018-19070

07 Nov 2018 — An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow remote attackers to execute arbitrary OS commands via shell metacharacters in the usrName parameter of a CGIProxy.fcgi addAccount action. Se ha descubierto un problema en dispositivos Foscam C2 con firmware del sistema 1.11.1.8 y firmware de aplicación 2.72.1.32, así como dispositivos Opticam i5 con... • https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •

CVSS: 9.8EPSS: 1%CPEs: 6EXPL: 1

CVE-2018-19082

https://notcve.org/view.php?id=CVE-2018-19082

07 Nov 2018 — An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to conduct stack-based buffer overflow attacks via the IPv4Address field. Se ha descubierto un problema en dispositivos Foscam Opticam i5 con firmware del sistema 1.5.2.11 y firmware de aplicación 2.21.1.128. El método ONVIF devicemgmt SetDNS permite que atacantes remotos lleven a cabo ataques de desbordamiento de búfer basado en p... • https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt • CWE-787: Out-of-bounds Write •

CVSS: 9.8EPSS: 0%CPEs: 6EXPL: 1

CVE-2018-19076

https://notcve.org/view.php?id=CVE-2018-19076

07 Nov 2018 — An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The FTP and RTSP services make it easier for attackers to conduct brute-force authentication attacks, because failed-authentication limits apply only to HTTP (not FTP or RTSP). Se ha descubierto un problema en dispositivos Foscam C2 con firmware del sistema 1.11.1.8 y firmware de aplicación 2.72.1.32, así como... • https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt • CWE-287: Improper Authentication •

CVSS: 7.8EPSS: 1%CPEs: 6EXPL: 1

CVE-2018-19077

https://notcve.org/view.php?id=CVE-2018-19077

07 Nov 2018 — An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. RtspServer allows remote attackers to cause a denial of service (daemon hang or restart) via a negative integer in the RTSP Content-Length header. Se ha descubierto un problema en dispositivos Foscam Opticam i5 con firmware del sistema 1.5.2.11 y firmware de aplicación 2.21.1.128. RtspServer permite que los atacantes remotos provoquen una denegación de servicio (bloqueo del demonio o reini... • https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt • CWE-125: Out-of-bounds Read •

CVSS: 10.0EPSS: 6%CPEs: 6EXPL: 1

CVE-2018-19081

https://notcve.org/view.php?id=CVE-2018-19081

07 Nov 2018 — An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to execute arbitrary OS commands via the IPv4Address field. Se ha descubierto un problema en dispositivos Foscam Opticam i5 con firmware del sistema 1.5.2.11 y firmware de aplicación 2.21.1.128. El método ONVIF devicemgmt SetDNS permite que atacantes remotos ejecuten comandos arbitrarios del sistema operativo mediante el campo IPv4... • https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •

CVSS: 10.0EPSS: 1%CPEs: 6EXPL: 1

CVE-2018-19069

https://notcve.org/view.php?id=CVE-2018-19069

07 Nov 2018 — An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for the root user with a password of toor. Se ha descubierto un problema en dispositivos Foscam C2 con firmware del sistema 1.11.1.8 y firmware de aplicación 2.72.1.32, así como dispositivos Opticam i5 con firmware del sistema 1.5.2.11 y firmware de a... • https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt • CWE-798: Use of Hard-coded Credentials •