CVE-2018-19063

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware…

published November 7, 2018

CVSS
—
EPSS
2%
Percentile
80.5
In the wild
Unconfirmed
What it is

⚠️ A blank admin password on your Foscam C2 or Opticam i5 is a recipe for disaster! Anyone could stroll right into your security camera like a burglar waltzing through an open door. 🚪 Think of it like leaving the front door of your home wide open while you go on vacation — an open invitation to anyone passing by! In this case, the devices don't require a password to access the admin account, making it dangerously easy for intruders to take control. An attacker could gain unauthorized access to the device, allowing them to change settings, view live feeds, or even disable the camera completely. This could result in a catastrophic loss of privacy and security, leaving you vulnerable.

Put simply

Think of it like leaving the front door of your home wide open while you go on vacation — an open invitation to anyone passing by! In this case, the devices don't require a password to access the admin account, making it dangerously easy for intruders to take control. This vulnerability allows unauthorized access due to an admin account with a blank password on specific Foscam and Opticam devices, meaning anyone can log in without any credentials and make potentially harmful changes.

What to do

An attacker could gain unauthorized access to the device, allowing them to change settings, view live feeds, or even disable the camera completely. This could result in a catastrophic loss of privacy and security, leaving you vulnerable. Change the admin password immediately to a strong, complex one! Additionally, consider updating the firmware to the latest version to ensure any other vulnerabilities are patched. You've got this! Lock down your devices now and enjoy peace of mind. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01995 · 80.5th percentile
Published
2018-11-07T18:00Z
EPSS history
Timeline
  • 07 NOV 18:00Z
    An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware…
    cvelistv5