CVE-2018-19071

HIGH

Opticam i5 Application Firmware 2.21.1.128 - Incorrect Permission Assignment for Critical Resource

Title source: llm
STIX 2.1

Description

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. /mnt/mtd/boot.sh has 0777 permissions, allowing local users to control the commands executed at system start-up.

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0039
EPSS Percentile 30.7%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-732
Status published
Products (4)
foscam/c2_application_firmware 2.72.1.32
foscam/c2_system_firmware 1.11.1.8
opticam/i5_application_firmware 2.21.1.128
opticam/i5_system_firmware 1.5.2.11
Published Nov 07, 2018
Tracked Since Feb 18, 2026