← Back to CVE List
Vulnerability Intelligence Report

CVE-2018-6832

Stack-based buffer overflow in the getSWFlag function in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI9851P V3, and FI9853EP V2 2.84.2.33 and earlier, FI9816P V3, FI9821EP V2, FI9821P V3, FI9826P V3, and FI9831P V3 2.81.2.33 and earlier, C1, C1 V2, C1 Lite, and C1 Lite V2 2.52.2.47 and earlier, FI9800P, FI9800P V2, FI9803P V2, FI9803P V3, and FI9851P V2 2.54.2.47 and earlier, FI9815P, FI9815P V2, FI9816P, and FI9816P V2, 2.51.2.47 and earlier, R2 and R4 2.71.1.59 and earlier, C2 and FI9961EP 2.72.1.59 and earlier, FI9900EP, FI9900P, and FI9901EP 2.74.1.59 and earlier, FI9928P 2.74.1.58 and earlier, FI9803EP and FI9853EP 2.22.2.31 and earlier, FI9803P and FI9851P 2.24.2.31 and earlier, FI9821P V2, FI9826P V2, FI9831P V2, and FI9821EP 2.21.2.31 and earlier, FI9821W V2, FI9831W, FI9826W, FI9821P, FI9831P, and FI9826P 2.11.1.120 and earlier, FI9818W V2 2.13.2.120 and earlier, FI9805W, FI9804W, FI9804P, FI9805E, and FI9805P 2.14.1.120 and earlier, FI9828P, and FI9828W 2.13.1.120 and earlier, and FI9828P V2 2.11.1.133 and earlier allows remote attackers to cause a denial of service (crash and reboot), via the callbackJson parameter.

No Active Exploit Signals
CVSS Base Score
7.5
HIGH
EPSS Probability:2.33%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—

Affected Products & Versions

Vendor Product Affected Versions
foscam c1_lite_firmware all
foscam c1_lite 3, 2
foscam c1_firmware all
foscam c1 3, 2
foscam fi9800p_firmware all
foscam fi9800p 3, 2
foscam fi9821ep_firmware all
foscam fi9821ep 2
foscam fi9821p_firmware all
foscam fi9821p 3, 2
foscam fi9826p_firmware all
foscam fi9826p 3, 2
foscam fi9831p_firmware all
foscam fi9831p 3, 2
foscam fi9803p_firmware all
foscam fi9803p 2, 3
foscam fi9851p_firmware all
foscam fi9851p 2
foscam fi9815p_firmware all
foscam fi9815p 2
foscam fi9816p_firmware all
foscam fi9816p 2
foscam r2_firmware all
foscam r2 all
foscam r4_firmware all
foscam r4 all
foscam c2_firmware all
foscam c2 all
foscam fi9961ep_firmware all
foscam fi9961ep all
foscam fi9900ep_firmware all
foscam fi9900ep all
foscam fi9900p_firmware all
foscam fi9900p all
foscam fi9901ep_firmware all
foscam fi9901ep all
foscam fi9928p_firmware all
foscam fi9928p all
foscam fi9803ep_firmware all
foscam fi9803ep all
foscam fi9853ep_firmware all
foscam fi9853ep all
foscam fi9821w_firmware all
foscam fi9821w 2
foscam fi9831w_firmware all
foscam fi9831w all
foscam fi9826w_firmware all
foscam fi9826w all
foscam fi9818w_firmware all
foscam fi9818w 2
foscam fi9805w_firmware all
foscam fi9805w all
foscam fi9804w_firmware all
foscam fi9804w all
foscam fi9804p_firmware all
foscam fi9804p all
foscam fi9805e_firmware all
foscam fi9805e all
foscam fi9805p_firmware all
foscam fi9805p all
foscam fi9828p_firmware all
foscam fi9828p 2
foscam fi9828w_firmware all
foscam fi9828w all

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

EPSS Score
2.332%

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityMITRE Corporation · N/A · USA
Reserved2018-02-07T00:00:00
Published2018-07-09T17:00:00
Patch Date2018-06-06
Last Updated2024-08-05T06:17:15

LINK COPIED TO CLIPBOARD