{"id":"CVE-2018-19065","aliases":["EUVD-2018-10780","GHSA-gxc8-m5wx-gqxj"],"status":"published","title":"An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...","description":"An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The exported device configuration is encrypted with the hardcoded BpP+2R9*Q password in some cases.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01582,"percentile":0.75686,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-798"],"published":"2018-11-07T18:00:00Z","modified":"2026-06-17T01:48:43Z","products":[{"vendor":"foscam","product":"c2_application_firmware"},{"vendor":"foscam","product":"c2_system_firmware"},{"vendor":"opticam","product":"i5_application_firmware"},{"vendor":"opticam","product":"i5_system_firmware"}],"references":[{"url":"https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19065"},{"url":"https://github.com/advisories/GHSA-gxc8-m5wx-gqxj"}],"sources":{"cve":[{"id":"CVE-2018-19065","description":"An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The exported device configuration is encrypted with the hardcoded BpP+2R9*Q password in some cases.","status":"published","published":"2018-11-07T18:00:00Z","modified":"2024-08-05T11:30:03.38Z","updated_at":"2026-11-02T14:35:03.288698Z"}],"euvd":[{"id":"EUVD-2018-10780","description":"An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The exported device configuration is encrypted with the hardcoded BpP+2R9*Q password in some cases.","status":"published","published":"2018-11-07T18:00:00Z","modified":"2024-08-05T11:30:03Z","updated_at":"2026-11-03T02:39:34.247095Z"}],"ghsa":[{"id":"GHSA-gxc8-m5wx-gqxj","title":"An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...","description":"An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The exported device configuration is encrypted with the hardcoded BpP+2R9*Q password in some cases.","status":"published","published":"2022-05-14T01:50:36Z","modified":"2023-02-02T05:04:37Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:51:55.393577Z"}],"nvd":[{"id":"CVE-2018-19065","description":"An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The exported device configuration is encrypted with the hardcoded BpP+2R9*Q password in some cases.","status":"published","published":"2018-11-07T18:29:01.18Z","modified":"2026-06-17T01:48:43.26Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:04:47.196456Z"}]}}