CVE-2014-1849

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 12.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2014-05-14 · updated 2026-06-17
Weakness: CWE-255

Description

Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates credentials based on predictable camera subdomain names, which allows remote attackers to spoof or hijack arbitrary cameras and conduct other attacks by modifying arbitrary camera records in the Foscam DNS server.

Affected products

Foscam Ip Camera Firmware: 11.37.2.49

References

http://blog.shekyan.com/2014/05/cve-2014-1849-foscam-dynamic-dns-predictable-credentials-vulnerability.html
http://seclists.org/fulldisclosure/2014/May/35
https://github.com/artemharutyunyan/getmecamtool/blob/master/src/dnsmod.c
http://blog.shekyan.com/2014/05/cve-2014-1849-foscam-dynamic-dns-predictable-credentials-vulnerability.html
http://seclists.org/fulldisclosure/2014/May/35
https://github.com/artemharutyunyan/getmecamtool/blob/master/src/dnsmod.c

Get alerted when CVE-2014-1849 or the next vulnerability affects your stack