VAR-201807-2160

Vulnerability from variot - Updated: 2024-11-23 22:38

The setSystemTime function in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI9851P V3, and FI9853EP V2 2.84.2.33 and earlier, FI9816P V3, FI9821EP V2, FI9821P V3, FI9826P V3, and FI9831P V3 2.81.2.33 and earlier, C1, C1 V2, C1 Lite, and C1 Lite V2 2.52.2.47 and earlier, FI9800P, FI9800P V2, FI9803P V2, FI9803P V3, and FI9851P V2 2.54.2.47 and earlier, FI9815P, FI9815P V2, FI9816P, and FI9816P V2, 2.51.2.47 and earlier, R2 and R4 2.71.1.59 and earlier, C2 and FI9961EP 2.72.1.59 and earlier, FI9900EP, FI9900P, and FI9901EP 2.74.1.59 and earlier, FI9928P 2.74.1.58 and earlier, FI9803EP and FI9853EP 2.22.2.31 and earlier, FI9803P and FI9851P 2.24.2.31 and earlier, FI9821P V2, FI9826P V2, FI9831P V2, and FI9821EP 2.21.2.31 and earlier, FI9821W V2, FI9831W, FI9826W, FI9821P, FI9831P, and FI9826P 2.11.1.120 and earlier, FI9818W V2 2.13.2.120 and earlier, FI9805W, FI9804W, FI9804P, FI9805E, and FI9805P 2.14.1.120 and earlier, FI9828P, and FI9828W 2.13.1.120 and earlier, and FI9828P V2 2.11.1.133 and earlier allows remote authenticated users to execute arbitrary commands via a ';' in the ntpServer argument. NOTE: this issue exists because of an incomplete fix for CVE-2017-2849. plural Foscam The camera contains a command injection vulnerability. This vulnerability CVE-2017-2849 Due to an incomplete fix.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Foscomm (FOSCAM) is a safe living brand under the Shenzhen Foscom Intelligent Technology Co., Ltd., covering network video surveillance products (webcam, hard disk recorder, monitoring kit), video cloud storage services. The Foscom Foscam camera has a command injection vulnerability that stems from an attacker gaining administrator credentials that can be exploited as the root user to perform privilege escalation. are network camera products of China Foscam (FOSCAM) company. A security vulnerability exists in the 'setSystemTime' function in several Foscam Cameras products. A remote attacker can use the ';' in the ntpServer parameter to exploit this vulnerability to execute arbitrary commands

Show details on source website

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201807-2160",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "fi9828p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.11.1.133"
      },
      {
        "model": "fi9851p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.54.2.47"
      },
      {
        "model": "fi9803p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.24.2.31"
      },
      {
        "model": "fi9853ep",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.22.2.31"
      },
      {
        "model": "c1 lite",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.52.2.47"
      },
      {
        "model": "fi9901ep",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.74.1.59"
      },
      {
        "model": "c1",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.52.2.47"
      },
      {
        "model": "fi9803p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.54.2.47"
      },
      {
        "model": "c2",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.72.1.59"
      },
      {
        "model": "fi9928p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.74.1.58"
      },
      {
        "model": "fi9805p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.14.1.120"
      },
      {
        "model": "fi9803ep",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.22.2.31"
      },
      {
        "model": "fi9831p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.11.1.120"
      },
      {
        "model": "fi9826p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.11.1.120"
      },
      {
        "model": "fi9821p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.11.1.120"
      },
      {
        "model": "fi9826p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.21.2.31"
      },
      {
        "model": "r4",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.71.1.59"
      },
      {
        "model": "fi9831p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.21.2.31"
      },
      {
        "model": "fi9821p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.21.2.31"
      },
      {
        "model": "fi9800p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.81.2.33"
      },
      {
        "model": "fi9831w",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.11.1.120"
      },
      {
        "model": "c1 lite",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.82.2.33"
      },
      {
        "model": "c1",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.82.2.33"
      },
      {
        "model": "fi9900p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.74.1.59"
      },
      {
        "model": "fi9828p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.13.1.120"
      },
      {
        "model": "fi9804p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.14.1.120"
      },
      {
        "model": "fi9821ep",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.21.2.31"
      },
      {
        "model": "fi9800p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.54.2.47"
      },
      {
        "model": "fi9961ep",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.72.1.59"
      },
      {
        "model": "fi9900ep",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.74.1.59"
      },
      {
        "model": "r2",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.71.1.59"
      },
      {
        "model": "fi9818w",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.13.2.120"
      },
      {
        "model": "fi9828w",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.13.1.120"
      },
      {
        "model": "fi9805e",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.14.1.120"
      },
      {
        "model": "fi9821w",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.11.1.120"
      },
      {
        "model": "fi9826p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.81.2.33"
      },
      {
        "model": "fi9831p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.81.2.33"
      },
      {
        "model": "fi9821p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.81.2.33"
      },
      {
        "model": "fi9815p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.51.2.47"
      },
      {
        "model": "fi9821ep",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.81.2.33"
      },
      {
        "model": "fi9851p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.24.2.31"
      },
      {
        "model": "fi9826w",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.11.1.120"
      },
      {
        "model": "fi9805w",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.14.1.120"
      },
      {
        "model": "fi9816p",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.51.2.47"
      },
      {
        "model": "fi9804w",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "foscam",
        "version": "2.14.1.120"
      },
      {
        "model": "c1 lite",
        "scope": null,
        "trust": 0.8,
        "vendor": "foscam",
        "version": null
      },
      {
        "model": "c1",
        "scope": null,
        "trust": 0.8,
        "vendor": "foscam",
        "version": null
      },
      {
        "model": "c2",
        "scope": null,
        "trust": 0.8,
        "vendor": "foscam",
        "version": null
      },
      {
        "model": "fi9800p",
        "scope": null,
        "trust": 0.8,
        "vendor": "foscam",
        "version": null
      },
      {
        "model": "fi9900p",
        "scope": null,
        "trust": 0.8,
        "vendor": "foscam",
        "version": null
      },
      {
        "model": "r2",
        "scope": null,
        "trust": 0.8,
        "vendor": "foscam",
        "version": null
      },
      {
        "model": "r4",
        "scope": null,
        "trust": 0.8,
        "vendor": "foscam",
        "version": null
      },
      {
        "model": "foscam",
        "scope": null,
        "trust": 0.6,
        "vendor": "foscam",
        "version": null
      },
      {
        "model": "fi9804w",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "foscam",
        "version": "2.14.1.120"
      },
      {
        "model": "fi9805w",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "foscam",
        "version": "2.14.1.120"
      },
      {
        "model": "fi9828p",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "foscam",
        "version": "2.13.1.120"
      },
      {
        "model": "fi9804p",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "foscam",
        "version": "2.14.1.120"
      },
      {
        "model": "fi9828w",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "foscam",
        "version": "2.13.1.120"
      },
      {
        "model": "fi9805p",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "foscam",
        "version": "2.14.1.120"
      },
      {
        "model": "fi9828p",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "foscam",
        "version": "2.11.1.133"
      },
      {
        "model": "fi9805e",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "foscam",
        "version": "2.14.1.120"
      },
      {
        "model": "fi9826p",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "foscam",
        "version": "2.11.1.120"
      },
      {
        "model": "fi9818w",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "foscam",
        "version": "2.13.2.120"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2018-12143"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-008030"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201807-496"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-6831"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/o:foscam:c1_lite_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:foscam:c1_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:foscam:c2_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:foscam:fi9800p_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:foscam:fi9900p_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:foscam:r2_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:foscam:r4_firmware",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-008030"
      }
    ]
  },
  "cve": "CVE-2018-6831",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.0,
            "id": "CVE-2018-6831",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 1.8,
            "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 8.5,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 6.8,
            "id": "CNVD-2018-12143",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "author": "VULHUB",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.0,
            "id": "VHN-136863",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:S/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 1.2,
            "id": "CVE-2018-6831",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "trust": 1.8,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2018-6831",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2018-6831",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2018-12143",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201807-496",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULHUB",
            "id": "VHN-136863",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2018-12143"
      },
      {
        "db": "VULHUB",
        "id": "VHN-136863"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-008030"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201807-496"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-6831"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "The setSystemTime function in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI9851P V3, and FI9853EP V2 2.84.2.33 and earlier, FI9816P V3, FI9821EP V2, FI9821P V3, FI9826P V3, and FI9831P V3 2.81.2.33 and earlier, C1, C1 V2, C1 Lite, and C1 Lite V2 2.52.2.47 and earlier, FI9800P, FI9800P V2, FI9803P V2, FI9803P V3, and FI9851P V2 2.54.2.47 and earlier, FI9815P, FI9815P V2, FI9816P, and FI9816P V2, 2.51.2.47 and earlier, R2 and R4 2.71.1.59 and earlier, C2 and FI9961EP 2.72.1.59 and earlier, FI9900EP, FI9900P, and FI9901EP 2.74.1.59 and earlier, FI9928P 2.74.1.58 and earlier, FI9803EP and FI9853EP 2.22.2.31 and earlier, FI9803P and FI9851P 2.24.2.31 and earlier, FI9821P V2, FI9826P V2, FI9831P V2, and FI9821EP 2.21.2.31 and earlier, FI9821W V2, FI9831W, FI9826W, FI9821P, FI9831P, and FI9826P 2.11.1.120 and earlier, FI9818W V2 2.13.2.120 and earlier, FI9805W, FI9804W, FI9804P, FI9805E, and FI9805P 2.14.1.120 and earlier, FI9828P, and FI9828W 2.13.1.120 and earlier, and FI9828P V2 2.11.1.133 and earlier allows remote authenticated users to execute arbitrary commands via a \u0027;\u0027 in the ntpServer argument.  NOTE: this issue exists because of an incomplete fix for CVE-2017-2849. plural Foscam The camera contains a command injection vulnerability. This vulnerability CVE-2017-2849 Due to an incomplete fix.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Foscomm (FOSCAM) is a safe living brand under the Shenzhen Foscom Intelligent Technology Co., Ltd., covering network video surveillance products (webcam, hard disk recorder, monitoring kit), video cloud storage services. The Foscom Foscam camera has a command injection vulnerability that stems from an attacker gaining administrator credentials that can be exploited as the root user to perform privilege escalation. are network camera products of China Foscam (FOSCAM) company. A security vulnerability exists in the \u0027setSystemTime\u0027 function in several Foscam Cameras products. A remote attacker can use the \u0027;\u0027 in the ntpServer parameter to exploit this vulnerability to execute arbitrary commands",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2018-6831"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-008030"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2018-12143"
      },
      {
        "db": "VULHUB",
        "id": "VHN-136863"
      }
    ],
    "trust": 2.25
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2018-6831",
        "trust": 3.1
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-008030",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201807-496",
        "trust": 0.7
      },
      {
        "db": "CNVD",
        "id": "CNVD-2018-12143",
        "trust": 0.6
      },
      {
        "db": "VULHUB",
        "id": "VHN-136863",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2018-12143"
      },
      {
        "db": "VULHUB",
        "id": "VHN-136863"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-008030"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201807-496"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-6831"
      }
    ]
  },
  "id": "VAR-201807-2160",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2018-12143"
      },
      {
        "db": "VULHUB",
        "id": "VHN-136863"
      }
    ],
    "trust": 1.3452861933333333
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2018-12143"
      }
    ]
  },
  "last_update_date": "2024-11-23T22:38:05.481000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Securing Your Foscam Camera - Important Notice",
        "trust": 0.8,
        "url": "https://www.foscam.com/company/securing-your-foscam-camera-important-notice.html"
      },
      {
        "title": "Fuscom Foscam Camera Command Injection Vulnerability Patch",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/132885"
      },
      {
        "title": "Multiple Foscam Product security vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=84012"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2018-12143"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-008030"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201807-496"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-78",
        "trust": 1.1
      },
      {
        "problemtype": "CWE-77",
        "trust": 0.9
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-136863"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-008030"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-6831"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 3.1,
        "url": "https://blog.vdoo.com/2018/06/06/vdoo-has-found-major-vulnerabilities-in-foscam-cameras/"
      },
      {
        "trust": 1.7,
        "url": "https://www.foscam.com/company/securing-your-foscam-camera-important-notice.html"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-6831"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-6831"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2018-12143"
      },
      {
        "db": "VULHUB",
        "id": "VHN-136863"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-008030"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201807-496"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-6831"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2018-12143"
      },
      {
        "db": "VULHUB",
        "id": "VHN-136863"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-008030"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201807-496"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-6831"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2018-06-27T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2018-12143"
      },
      {
        "date": "2018-07-09T00:00:00",
        "db": "VULHUB",
        "id": "VHN-136863"
      },
      {
        "date": "2018-10-05T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2018-008030"
      },
      {
        "date": "2018-07-09T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201807-496"
      },
      {
        "date": "2018-07-09T17:29:00.260000",
        "db": "NVD",
        "id": "CVE-2018-6831"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2018-06-27T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2018-12143"
      },
      {
        "date": "2019-10-03T00:00:00",
        "db": "VULHUB",
        "id": "VHN-136863"
      },
      {
        "date": "2018-10-05T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2018-008030"
      },
      {
        "date": "2019-10-23T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201807-496"
      },
      {
        "date": "2024-11-21T04:11:15.770000",
        "db": "NVD",
        "id": "CVE-2018-6831"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201807-496"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "plural  Foscam Command injection vulnerability in camera",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-008030"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "operating system commend injection",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201807-496"
      }
    ],
    "trust": 0.6
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…