What’s Vulnerable › Vulnerabilities

CVE-2018-19080

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-11-07 · updated 2026-06-17
• Weakness: CWE-79

Description

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetHostname method allows unauthenticated persistent XSS.

Affected products

• Foscam C2 Application Firmware: 2.72.1.32
• Foscam C2 System Firmware: 1.11.1.8
• Opticam I5 Application Firmware: 2.21.1.128
• Opticam I5 System Firmware: 1.5.2.11

References

• https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
• https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt

Get alerted when CVE-2018-19080 or the next vulnerability affects your stack