CVE-2018-19073

2018-11-0718:00:00

mitre

www.cve.org

AI Score

7.5

Confidence

High

EPSS

0.003

Percentile

68.7%

JSON

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow attackers to execute arbitrary OS commands via shell metacharacters in the modelName, by leveraging /mnt/mtd/app/config/ProductConfig.xml write access.

References

sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt