CVE-2018-19064

PoC —

CVSS 3.0

9.8 critical

EPSS

2%p79

Published

Nov 7, 2018 (Nov 7, 2018)

Modified

Jun 17, 2026

Description

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ftpuser1 account has a blank password, which cannot be changed.

Vendors: opticam foscam
Products: i5 application firmware, i5 system firmware, c2 application firmware, c2 system firmware
Weakness: CWE-521
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news0 stories

No ingested article mentions this CVE yet.