Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-25437. PoCs published by Alessandro Magnosi.
AI-analyzed exploit summary This PoC exploits a buffer overflow vulnerability in Foscam Video Management System 1.1.6.6 by generating a large string of 'A' characters (5000 bytes) and writing it to a file. When this content is pasted into the UID field during device addition, it triggers a crash, demonstrating a local Denial of Service (DoS).
Description
Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 5000-character buffer into the UID parameter during device addition to trigger an application crash when the Login Check function is invoked.
Exploits (1)
This PoC exploits a buffer overflow vulnerability in Foscam Video Management System 1.1.6.6 by generating a large string of 'A' characters (5000 bytes) and writing it to a file. When this content is pasted into the UID field during device addition, it triggers a crash, demonstrating a local Denial of Service (DoS).
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H