What’s Vulnerable › Vulnerabilities

CVE-2018-19068

• Severity: medium (CVSS 4.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-11-07 · updated 2026-06-17

Description

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for hidden factory credentials.

Affected products

• Foscam C2 Application Firmware: 2.72.1.32
• Foscam C2 System Firmware: 1.11.1.8
• Opticam I5 Application Firmware: 2.21.1.128
• Opticam I5 System Firmware: 1.5.2.11

References

• https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
• https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt

Get alerted when CVE-2018-19068 or the next vulnerability affects your stack