An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to conduct stack-based buffer overflow attacks via the IPv4Address field.
| CVE | CVE-2018-19082 |
|---|---|
| Severidad | CRITICAL |
| CVSS | 9.8 / 10 |
| EPSS | 2.3% en 30 días (percentil 83) |
| CWE | CWE-787 |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |
Productos afectados (catálogo NVD)
foscam/c2foscam/c2_application_firmwarefoscam/c2_system_firmwareopticam/i5opticam/i5_application_firmwareopticam/i5_system_firmware