CVE-2018-6832

Stack-based buffer overflow in the getSWFlag function in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI9851P V3, and FI9853EP V2 2.84.2.33 and earlier, FI9816P V3, FI9821EP V2, FI9821P V3, FI9826P V3, and FI9831P V3 2.81.2.33 and earlier, C1, ...

CVE-2018-6832

CVE-2018-6832 is a stack-based buffer overflow in Foscam’s webService getSWFlag routine. An unauthenticated GET request to /CGIProxy.fcgi?cmd=getSWFlag that includes a long callbackJson parameter overflows a stack buffer (callbackJson_var), crashing the webService and triggering watchdog restart,...