Vulnerability-Lookup

CNVD-2018-22819

Vulnerability from cnvd - Published: 2018-11-09

Title

Foscam Opticam i5拒绝服务漏洞

Description

Foscam Opticam i5是福斯康姆(FOSCAM)推出的一款IP摄像机。系统固件为1.5.2.11和应用程序固件为2.21.1.128的Foscam Opticam i5的ONVIF devicemgmt SystemReboot方法存在拒绝服务漏洞。未认证攻击者可利用该漏洞导致设备重启。

Severity

高

Formal description

厂商尚未提供漏洞修复方案，请关注厂商主页更新： https://www.foscam.com/

Reference

https://nvd.nist.gov/vuln/detail/CVE-2018-19079

Impacted products

Name
['Foscam opticam i5 Application Firmware 2.21.1.128', 'Foscam opticam i5 System Firmware 1.5.2.11']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-19079"
    }
  },
  "description": "Foscam Opticam i5\u662f\u798f\u65af\u5eb7\u59c6(FOSCAM)\u63a8\u51fa\u7684\u4e00\u6b3eIP\u6444\u50cf\u673a\u3002\n\n\u7cfb\u7edf\u56fa\u4ef6\u4e3a1.5.2.11\u548c\u5e94\u7528\u7a0b\u5e8f\u56fa\u4ef6\u4e3a2.21.1.128\u7684Foscam Opticam i5\u7684ONVIF devicemgmt SystemReboot\u65b9\u6cd5\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u672a\u8ba4\u8bc1\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u8bbe\u5907\u91cd\u542f\u3002",
  "discovererName": "Harry Sintonen / F-Secure Corporation",
  "formalWay": "\u5382\u5546\u5c1a\u672a\u63d0\u4f9b\u6f0f\u6d1e\u4fee\u590d\u65b9\u6848\uff0c\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u66f4\u65b0\uff1a\r\nhttps://www.foscam.com/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-22819",
  "openTime": "2018-11-09",
  "products": {
    "product": [
      "Foscam opticam i5 Application Firmware 2.21.1.128",
      "Foscam opticam i5 System Firmware 1.5.2.11"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2018-19079",
  "serverity": "\u9ad8",
  "submitTime": "2018-11-08",
  "title": "Foscam Opticam i5\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}

CVE-2018-19079 (GCVE-0-2018-19079)

Vulnerability from cvelistv5 – Published: 2018-11-07 18:00 – Updated: 2024-08-05 11:30

Summary

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SystemReboot method allows unauthenticated reboot.

Severity

No CVSS data available.

CWE

Assigner

mitre

References

1 reference

URL	Tags
https://sintonen.fi/advisories/foscam-ip-camera-m…	x_refsource_MISC

Date Public

2018-11-07 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:30:03.570Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-11-07T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SystemReboot method allows unauthenticated reboot."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-07T18:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-19079",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SystemReboot method allows unauthenticated reboot."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt",
              "refsource": "MISC",
              "url": "https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-19079",
    "datePublished": "2018-11-07T18:00:00.000Z",
    "dateReserved": "2018-11-07T00:00:00.000Z",
    "dateUpdated": "2024-08-05T11:30:03.570Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2018-22819

CVE-2018-19079 (GCVE-0-2018-19079)

Tags

Sightings

Nomenclature