CVE-2018-19076

2018-11-0718:00:00

mitre

www.cve.org

AI Score

9.7

Confidence

High

EPSS

0.007

Percentile

79.7%

JSON

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The FTP and RTSP services make it easier for attackers to conduct brute-force authentication attacks, because failed-authentication limits apply only to HTTP (not FTP or RTSP).

References

sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt