CVE-2018-6831 is a command injection vulnerability in various Foscam IP camera models, including C1, C1 Lite, FI9800P, and R2 series, across numerous firmware versions. The flaw allows remote authenticated users to execute arbitrary commands by injecting a semicolon (;) into the ntpServer argument of the setSystemTime function. This vulnerability carries a CVSSv3 score of 7.2 (High), indicating a high-impact threat that could lead to complete compromise of the affected device. While a patch was released, this issue was an incomplete fix for a previous vulnerability (CVE-2017-2849). There is no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed in CISA's KEV catalog, suggesting it is not currently under active widespread exploitation. However, there has been some community discussion and media coverage, indicating awareness of the vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.82.2.33CPE matchmatch criteria | cpe:2.3:o:foscam:c1_lite_firmware:*:*:*:*:*:*:*:* | ||
<= 2.82.2.33CPE matchmatch criteria | cpe:2.3:o:foscam:c1_firmware:*:*:*:*:*:*:*:* | ||
<= 2.81.2.33CPE matchmatch criteria | cpe:2.3:o:foscam:fi9800p_firmware:*:*:*:*:*:*:*:* | ||
<= 2.81.2.33CPE matchmatch criteria | cpe:2.3:o:foscam:fi9821ep_firmware:*:*:*:*:*:*:*:* | ||
<= 2.81.2.33CPE matchmatch criteria | cpe:2.3:o:foscam:fi9821p_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.3 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.