https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-19082.htmlhttps://patchthecve.com/cve/CVE-2018-19082.htmlWed, 17 Jun 2026 01:48:45 +0000CRITICAL 9.8: An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to conduct stack-based buffer overflow attacks via the IPv4Address field.https://patchthecve.com/cve/CVE-2018-19081.htmlhttps://patchthecve.com/cve/CVE-2018-19081.htmlWed, 17 Jun 2026 01:48:45 +0000CRITICAL 9.8: An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to execute arbitrary OS commands via the IPv4Address field.https://patchthecve.com/cve/CVE-2018-19080.htmlhttps://patchthecve.com/cve/CVE-2018-19080.htmlWed, 17 Jun 2026 01:48:45 +0000MEDIUM 6.1: An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetHostname method allows unauthenticated persistent XSS.https://patchthecve.com/cve/CVE-2018-19079.htmlhttps://patchthecve.com/cve/CVE-2018-19079.htmlWed, 17 Jun 2026 01:48:45 +0000HIGH 7.5: An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SystemReboot method allows unauthenticated reboot.https://patchthecve.com/cve/CVE-2018-19078.htmlhttps://patchthecve.com/cve/CVE-2018-19078.htmlWed, 17 Jun 2026 01:48:44 +0000CRITICAL 9.8: An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The response to an ONVIF media GetStreamUri request contains the administrator username and password.https://patchthecve.com/cve/CVE-2018-19077.htmlhttps://patchthecve.com/cve/CVE-2018-19077.htmlWed, 17 Jun 2026 01:48:44 +0000HIGH 7.5: An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. RtspServer allows remote attackers to cause a denial of service (daemon hang or restart) via a negative integer in the RTSP Content-Length header.https://patchthecve.com/cve/CVE-2018-19076.htmlhttps://patchthecve.com/cve/CVE-2018-19076.htmlWed, 17 Jun 2026 01:48:44 +0000CRITICAL 9.8: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The FTP and RTSP services make it easier for attackers to conduct brute-force authentication attackhttps://patchthecve.com/cve/CVE-2018-19075.htmlhttps://patchthecve.com/cve/CVE-2018-19075.htmlWed, 17 Jun 2026 01:48:44 +0000MEDIUM 5.3: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The firewall feature makes it easier for remote attackers to ascertain credentials and firewall rulhttps://patchthecve.com/cve/CVE-2018-19074.htmlhttps://patchthecve.com/cve/CVE-2018-19074.htmlWed, 17 Jun 2026 01:48:44 +0000HIGH 7.5: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The firewall has no effect except for blocking port 443 and partially blocking port 88.https://patchthecve.com/cve/CVE-2018-19073.htmlhttps://patchthecve.com/cve/CVE-2018-19073.htmlWed, 17 Jun 2026 01:48:44 +0000HIGH 7.2: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow attackers to execute arbitrary OS commands via shell metacharacters in the modelName, byhttps://patchthecve.com/cve/CVE-2018-19072.htmlhttps://patchthecve.com/cve/CVE-2018-19072.htmlWed, 17 Jun 2026 01:48:44 +0000MEDIUM 5.5: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. /mnt/mtd/app has 0777 permissions, allowing local users to replace an archive file (within that dirhttps://patchthecve.com/cve/CVE-2018-19071.htmlhttps://patchthecve.com/cve/CVE-2018-19071.htmlWed, 17 Jun 2026 01:48:44 +0000HIGH 7.8: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. /mnt/mtd/boot.sh has 0777 permissions, allowing local users to control the commands executed at syshttps://patchthecve.com/cve/CVE-2018-19070.htmlhttps://patchthecve.com/cve/CVE-2018-19070.htmlWed, 17 Jun 2026 01:48:43 +0000HIGH 7.2: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow remote attackers to execute arbitrary OS commands via shell metacharacters in the usrNamhttps://patchthecve.com/cve/CVE-2018-19069.htmlhttps://patchthecve.com/cve/CVE-2018-19069.htmlWed, 17 Jun 2026 01:48:43 +0000CRITICAL 9.8: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for the root user with a password of tohttps://patchthecve.com/cve/CVE-2018-19068.htmlhttps://patchthecve.com/cve/CVE-2018-19068.htmlWed, 17 Jun 2026 01:48:43 +0000MEDIUM 4.9: An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for hidden factory credentials.https://patchthecve.com/cve/CVE-2018-19067.htmlhttps://patchthecve.com/cve/CVE-2018-19067.htmlWed, 17 Jun 2026 01:48:43 +0000CRITICAL 9.8: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. There is a hardcoded Ak47@99 password for the factory~ account.https://patchthecve.com/cve/CVE-2018-19066.htmlhttps://patchthecve.com/cve/CVE-2018-19066.htmlWed, 17 Jun 2026 01:48:43 +0000HIGH 7.5: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The exported device configuration is encrypted with the hardcoded Pxift* password in some cases.https://patchthecve.com/cve/CVE-2018-19065.htmlhttps://patchthecve.com/cve/CVE-2018-19065.htmlWed, 17 Jun 2026 01:48:43 +0000HIGH 7.5: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The exported device configuration is encrypted with the hardcoded BpP+2R9*Q password in some cases.https://patchthecve.com/cve/CVE-2018-19064.htmlhttps://patchthecve.com/cve/CVE-2018-19064.htmlWed, 17 Jun 2026 01:48:43 +0000CRITICAL 9.8: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ftpuser1 account has a blank password, which cannot be changed.https://patchthecve.com/cve/CVE-2018-19063.htmlhttps://patchthecve.com/cve/CVE-2018-19063.htmlWed, 17 Jun 2026 01:48:42 +0000CRITICAL 9.8: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The admin account has a blank password.