Lucene search

[email protected]CVE-2018-19079

HistoryNov 07, 2018 - 6:29 p.m.

CVE-2018-19079

2018-11-0718:29:06

CWE-306

CWE-862

[email protected]

web.nvd.nist.gov

cve-2018-19079

foscam opticam i5

system firmware

application firmware

onvif

unauthenticated reboot

nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.0%

JSON

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SystemReboot method allows unauthenticated reboot.

Affected configurations

NVD

Node

opticami5_application_firmwareMatch2.21.1.128

opticami5_system_firmwareMatch1.5.2.11

AND

opticami5Match-

Node

foscamc2_application_firmwareMatch2.72.1.32

foscamc2_system_firmwareMatch1.11.1.8

AND

foscamc2Match-

CPENameOperatorVersion
opticam:i5_application_firmwareopticam i5 application firmwareeq2.21.1.128
opticam:i5_system_firmwareopticam i5 system firmwareeq1.5.2.11

CPE	Name	Operator	Version
opticam:i5_application_firmware	opticam i5 application firmware	eq	2.21.1.128
opticam:i5_system_firmware	opticam i5 system firmware	eq	1.5.2.11

References

sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.0%

JSON

Related for CVE-2018-19079

cvelist1 nvd1 prion1