CVE-2018-6832 Detail
Current Description
Stack-based buffer overflow in the getSWFlag function in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI9851P V3, and FI9853EP V2 2.84.2.33 and earlier, FI9816P V3, FI9821EP V2, FI9821P V3, FI9826P V3, and FI9831P V3 2.81.2.33 and earlier, C1, C1 V2, C1 Lite, and C1 Lite V2 2.52.2.47 and earlier, FI9800P, FI9800P V2, FI9803P V2, FI9803P V3, and FI9851P V2 2.54.2.47 and earlier, FI9815P, FI9815P V2, FI9816P, and FI9816P V2, 2.51.2.47 and earlier, R2 and R4 2.71.1.59 and earlier, C2 and FI9961EP 2.72.1.59 and earlier, FI9900EP, FI9900P, and FI9901EP 2.74.1.59 and earlier, FI9928P 2.74.1.58 and earlier, FI9803EP and FI9853EP 2.22.2.31 and earlier, FI9803P and FI9851P 2.24.2.31 and earlier, FI9821P V2, FI9826P V2, FI9831P V2, and FI9821EP 2.21.2.31 and earlier, FI9821W V2, FI9831W, FI9826W, FI9821P, FI9831P, and FI9826P 2.11.1.120 and earlier, FI9818W V2 2.13.2.120 and earlier, FI9805W, FI9804W, FI9804P, FI9805E, and FI9805P 2.14.1.120 and earlier, FI9828P, and FI9828W 2.13.1.120 and earlier, and FI9828P V2 2.11.1.133 and earlier allows remote attackers to cause a denial of service (crash and reboot), via the callbackJson parameter.
Source:
MITRE
View Analysis Description
Analysis Description
Stack-based buffer overflow in the getSWFlag function in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI9851P V3, and FI9853EP V2 2.84.2.33 and earlier, FI9816P V3, FI9821EP V2, FI9821P V3, FI9826P V3, and FI9831P V3 2.81.2.33 and earlier, C1, C1 V2, C1 Lite, and C1 Lite V2 2.52.2.47 and earlier, FI9800P, FI9800P V2, FI9803P V2, FI9803P V3, and FI9851P V2 2.54.2.47 and earlier, FI9815P, FI9815P V2, FI9816P, and FI9816P V2, 2.51.2.47 and earlier, R2 and R4 2.71.1.59 and earlier, C2 and FI9961EP 2.72.1.59 and earlier, FI9900EP, FI9900P, and FI9901EP 2.74.1.59 and earlier, FI9928P 2.74.1.58 and earlier, FI9803EP and FI9853EP 2.22.2.31 and earlier, FI9803P and FI9851P 2.24.2.31 and earlier, FI9821P V2, FI9826P V2, FI9831P V2, and FI9821EP 2.21.2.31 and earlier, FI9821W V2, FI9831W, FI9826W, FI9821P, FI9831P, and FI9826P 2.11.1.120 and earlier, FI9818W V2 2.13.2.120 and earlier, FI9805W, FI9804W, FI9804P, FI9805E, and FI9805P 2.14.1.120 and earlier, FI9828P, and FI9828W 2.13.1.120 and earlier, and FI9828P V2 2.11.1.133 and earlier allows remote attackers to cause a denial of service (crash and reboot), via the callbackJson parameter.
Source:
MITRE
Impact
CVSS v3.0 Severity and Metrics:
Base Score:
7.5 HIGH
Vector:
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
(V3 legend)
Impact Score:
3.6
Exploitability Score:
3.9
Attack Vector (AV):
Network
Attack Complexity (AC):
Low
Privileges Required (PR):
None
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
None
Integrity (I):
None
Availability (A):
High
CVSS v2.0 Severity and Metrics:
Base Score:
7.8 HIGH
Vector:
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
(V2 legend)
Impact Subscore:
6.9
Exploitability Subscore:
10.0
Access Vector (AV):
Network
Access Complexity (AC):
Low
Authentication (AU):
None
Confidentiality (C):
None
Integrity (I):
None
Availability (A):
Complete
Additional Information:
Allows disruption of service
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because
they may have information that would be of interest to you. No inferences should be drawn on account of other sites
being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose.
NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further,
NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about
this page to nvd@nist.gov.
Technical Details
Vulnerability Type
(View All)
- Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119)
Known Affected Software Configurations
Switch to CPE 2.2
Configuration 1 ( hide ) Configuration 2 ( hide ) Configuration 3 ( hide ) Configuration 4 ( hide ) Configuration 5 ( hide ) Configuration 6 ( hide ) Configuration 7 ( hide ) Configuration 8 ( hide ) Configuration 9 ( hide ) Configuration 10 ( hide ) Configuration 11 ( hide ) Configuration 12 ( hide ) Configuration 13 ( hide ) Configuration 14 ( hide ) Configuration 15 ( hide ) Configuration 16 ( hide ) Configuration 17 ( hide ) Configuration 18 ( hide ) Configuration 19 ( hide ) Configuration 20 ( hide ) Configuration 21 ( hide ) Configuration 22 ( hide ) Configuration 23 ( hide ) Configuration 24 ( hide ) Configuration 25 ( hide ) Configuration 26 ( hide ) Configuration 27 ( hide ) Configuration 28 ( hide ) Configuration 29 ( hide ) Configuration 30 ( hide ) Configuration 31 ( hide ) Configuration 32 ( hide ) Configuration 33 ( hide ) Configuration 34 ( hide ) Configuration 35 ( hide ) Configuration 36 ( hide ) Configuration 37 ( hide ) Configuration 38 ( hide ) Configuration 39 ( hide ) Configuration 40 ( hide ) Configuration 41 ( hide ) Configuration 42 ( hide ) Configuration 43 ( hide ) Configuration 44 ( hide ) Configuration 45 ( hide ) Configuration 46 ( hide ) Configuration 47 ( hide ) Configuration 48 ( hide ) Configuration 49 ( hide ) Configuration 50 ( hide ) Configuration 51 ( hide )
Change History
1 change record found
- show changes
Initial Analysis -
9/14/2018 10:15:33 AM
| Action |
Type |
Old Value |
New Value |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:c1_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.52.2.47
OR
cpe:2.3:h:foscam:c1:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:c1_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.52.2.47
OR
cpe:2.3:h:foscam:c1:2:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:c1_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.82.2.33
OR
cpe:2.3:h:foscam:c1:3:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:c1_lite_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.52.2.47
OR
cpe:2.3:h:foscam:c1_lite:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:c1_lite_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.52.2.47
OR
cpe:2.3:h:foscam:c1_lite:2:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:c1_lite_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.82.2.33
OR
cpe:2.3:h:foscam:c1_lite:3:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:c2_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.72.1.59
OR
cpe:2.3:h:foscam:c2:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9800p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.54.2.47
OR
cpe:2.3:h:foscam:fi9800p:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9800p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.54.2.47
OR
cpe:2.3:h:foscam:fi9800p:2:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9800p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.81.2.33
OR
cpe:2.3:h:foscam:fi9800p:3:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9803ep_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.22.2.31
OR
cpe:2.3:h:foscam:fi9803ep:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9803p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.24.2.31
OR
cpe:2.3:h:foscam:fi9803p:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9803p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.54.2.47
OR
cpe:2.3:h:foscam:fi9803p:2:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9803p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.54.2.47
OR
cpe:2.3:h:foscam:fi9803p:3:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9804p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.14.1.120
OR
cpe:2.3:h:foscam:fi9804p:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9804w_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.14.1.120
OR
cpe:2.3:h:foscam:fi9804w:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9805e_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.14.1.120
OR
cpe:2.3:h:foscam:fi9805e:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9805p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.14.1.120
OR
cpe:2.3:h:foscam:fi9805p:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9805w_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.14.1.120
OR
cpe:2.3:h:foscam:fi9805w:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9815p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.51.2.47
OR
cpe:2.3:h:foscam:fi9815p:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9815p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.51.2.47
OR
cpe:2.3:h:foscam:fi9815p:2:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9816p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.51.2.47
OR
cpe:2.3:h:foscam:fi9816p:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9816p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.51.2.47
OR
cpe:2.3:h:foscam:fi9816p:2:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9818w_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.13.2.120
OR
cpe:2.3:h:foscam:fi9818w:2:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9821ep_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.21.2.31
OR
cpe:2.3:h:foscam:fi9821ep:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9821ep_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.81.2.33
OR
cpe:2.3:h:foscam:fi9821ep:2:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9821p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.11.1.120
OR
cpe:2.3:h:foscam:fi9821p:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9821p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.21.2.31
OR
cpe:2.3:h:foscam:fi9821p:2:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9821p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.81.2.33
OR
cpe:2.3:h:foscam:fi9821p:3:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9821w_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.11.1.120
OR
cpe:2.3:h:foscam:fi9821w:2:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9826p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.11.1.120
OR
cpe:2.3:h:foscam:fi9826p:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9826p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.21.2.31
OR
cpe:2.3:h:foscam:fi9826p:2:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9826p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.81.2.33
OR
cpe:2.3:h:foscam:fi9826p:3:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9826w_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.11.1.120
OR
cpe:2.3:h:foscam:fi9826w:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9828p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.11.1.133
OR
cpe:2.3:h:foscam:fi9828p:2:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9828p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.13.1.120
OR
cpe:2.3:h:foscam:fi9828p:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9828w_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.13.1.120
OR
cpe:2.3:h:foscam:fi9828w:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9831p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.11.1.120
OR
cpe:2.3:h:foscam:fi9831p:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9831p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.21.2.31
OR
cpe:2.3:h:foscam:fi9831p:2:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9831p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.81.2.33
OR
cpe:2.3:h:foscam:fi9831p:3:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9831w_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.11.1.120
OR
cpe:2.3:h:foscam:fi9831w:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9851p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.24.2.31
OR
cpe:2.3:h:foscam:fi9851p:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9851p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.54.2.47
OR
cpe:2.3:h:foscam:fi9851p:2:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9853ep_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.22.2.31
OR
cpe:2.3:h:foscam:fi9853ep:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9900ep_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.74.1.59
OR
cpe:2.3:h:foscam:fi9900ep:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9900p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.74.1.59
OR
cpe:2.3:h:foscam:fi9900p:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9901ep_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.74.1.59
OR
cpe:2.3:h:foscam:fi9901ep:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9928p_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.74.1.58
OR
cpe:2.3:h:foscam:fi9928p:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:fi9961ep_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.72.1.59
OR
cpe:2.3:h:foscam:fi9961ep:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:r2_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.71.1.59
OR
cpe:2.3:h:foscam:r2:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:foscam:r4_firmware:*:*:*:*:*:*:*:* versions up to (including) 2.71.1.59
OR
cpe:2.3:h:foscam:r4:-:*:*:*:*:*:*:* |
| Added |
CVSS V2 |
|
(AV:N/AC:L/Au:N/C:N/I:N/A:C) |
| Added |
CVSS V3 |
|
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| Added |
CWE |
|
CWE-119 |
| Changed |
Reference Type |
https://blog.vdoo.com/2018/06/06/vdoo-has-found-major-vulnerabilities-in-foscam-cameras/ No Types Assigned |
https://blog.vdoo.com/2018/06/06/vdoo-has-found-major-vulnerabilities-in-foscam-cameras/ Exploit, Third Party Advisory |
| Changed |
Reference Type |
https://www.foscam.com/company/securing-your-foscam-camera-important-notice.html No Types Assigned |
https://www.foscam.com/company/securing-your-foscam-camera-important-notice.html Vendor Advisory |
Quick Info
CVE Dictionary Entry:
CVE-2018-6832
NVD Published Date:
07/09/2018
NVD Last Modified:
09/14/2018
|