CVE-2018-19064

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware…

published November 7, 2018

CVSS
—
EPSS
2%
Percentile
80.5
In the wild
Unconfirmed
What it is

🚨 Your Foscam C2 and Opticam i5 devices come with a built-in surprise: a blank password for the ftpuser1 account! This is like giving out free keys to your house without a security check! 🔥 Imagine leaving the front door to your home wide open, with a sign that says 'please come in!' That's what happens when your device has a default account with no password, inviting any unwanted guest to stroll right in. An attacker could easily access your device's settings and potentially take control, leading to unauthorized surveillance or manipulation of your device. It's unsettling to think that someone could be watching you without your knowledge. Protecting your privacy here is absolutely crucial!

Put simply

Imagine leaving the front door to your home wide open, with a sign that says 'please come in!' That's what happens when your device has a default account with no password, inviting any unwanted guest to stroll right in. This issue involves Foscam C2 and Opticam i5 devices with specific firmware versions having a default ftpuser1 account set with a blank password, which cannot be modified, leaving them open to unauthorized access.

What to do

An attacker could easily access your device's settings and potentially take control, leading to unauthorized surveillance or manipulation of your device. It's unsettling to think that someone could be watching you without your knowledge. Protecting your privacy here is absolutely crucial! To mitigate this vulnerability, it's essential to ensure your devices are on the latest firmware. Regularly check Foscam's website for updates, and if possible, limit network access to trusted devices only. 🌐 You've got this! By taking these steps, you're one step closer to being a security hero! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01995 · 80.5th percentile
Published
2018-11-07T18:00Z
EPSS history
Timeline
  • 07 NOV 18:00Z
    An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware…
    cvelistv5