CVE-2018-19082
CVE-2018-19082 is a critical stack-based buffer overflow vulnerability affecting Foscam Opticam i5 devices running System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. This flaw, rated 9.8 CVSS (Critical), allows unauthenticated remote attackers to execute arbitrary code by sending a crafted IPv4Address field to the ONVIF devicemgmt SetDNS method. Despite its high severity and potential for complete compromise (confidentiality, integrity, availability), there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
Impacted Technologies
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.21.1.128CPE matchmatch criteria | cpe:2.3:o:opticam:i5_application_firmware:2.21.1.128:*:*:*:*:*:*:* | ||
1.5.2.11CPE matchmatch criteria | cpe:2.3:o:opticam:i5_system_firmware:1.5.2.11:*:*:*:*:*:*:* | ||
2.72.1.32CPE matchmatch criteria | cpe:2.3:o:foscam:c2_application_firmware:2.72.1.32:*:*:*:*:*:*:* | ||
1.11.1.8CPE matchmatch criteria | cpe:2.3:o:foscam:c2_system_firmware:1.11.1.8:*:*:*:*:*:*:* |
CVSS Data
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploit Intelligence
Social Chatter
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
Media Mentions
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation
Remediation records are not available for this CVE.