VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 7, 2018· Updated Aug 5, 2024

CVE-2018-19073

CVE-2018-19073

Description

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow attackers to execute arbitrary OS commands via shell metacharacters in the modelName, by leveraging /mnt/mtd/app/config/ProductConfig.xml write access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Foscam/Opticam i5llm-fuzzy
    Range: = system firmware 1.5.2.11 / application firmware 2.21.1.128
  • Foscam/C2llm-fuzzy
    Range: = system firmware 1.11.1.8 / application firmware 2.72.1.32

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.