Foscam

43 CVEs across 89 Foscam products. Browse Foscam vulnerabilities, severities, and proof-of-concept exploits.

Foscam products with known CVEs

ProductCVEs
C224
C2 Application Firmware20
C2 System Firmware20
C119
C1 Firmware18
Indoor Ip Camera C1 Series17
C1 Indoor Hd Camera16
C1 Indoor Hd Camera Firmware16
Foscam C1 Indoor Hd Camera7
Foscam Indoor Ip Camera C1 Series5
C1 Lite4
Fi9805e4
Fi9805e Firmware4
Fi9826p4
Fi9828p4
Fi9851p4
Fi9853ep4
Fi9901ep4
Fi9928p4
R24
C1 Lite Firmware3
C2 Firmware3
Fi9800p3
Fi9800p Firmware3
Fi9803ep3
Fi9803ep Firmware3
Fi9803p3
Fi9803p Firmware3
Fi9804p3
Fi9804p Firmware3
Fi9804w3
Fi9804w Firmware3
Fi9805p3
Fi9805p Firmware3
Fi9805w3
Fi9805w Firmware3
Fi9815p3
Fi9815p Firmware3
Fi9816p3
Fi9816p Firmware3
Fi9818w3
Fi9818w Firmware3
Fi9821ep3
Fi9821ep Firmware3
Fi9821p3
Fi9821p Firmware3
Fi9821w3
Fi9821w Firmware3
Fi9826p Firmware3
Fi9826w3
Foscam CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2019-25437Medium6.22026-02-20Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supply…
CVE-2022-28743Critical9.12022-04-21Time-of-check Time-of-use (TOCTOU) Race Condition vulerability in Foscam R2C IP camera running System FW <= 1.13.1.6, and Application FW <= 2.91.2.66, allows a…
CVE-2021-43517Critical9.82022-04-08FOSCAM Camera FI9805E with firmware V4.02.R12.00018510.10012.143900.00000 contains a backdoor that opens Telnet port when special command is sent on port 9530.
CVE-2013-2574High7.52020-01-29An Access vulnerability exists in FOSCAM IP Camera FI8620 due to insufficient access restrictions in the /tmpfs/ and /log/ directories, which could let a malic…
CVE-2018-19082Critical9.82018-11-07An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allo…
CVE-2018-19081Critical9.82018-11-07An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allo…
CVE-2018-19080Medium6.12018-11-07An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetHostname method…
CVE-2018-19079High7.52018-11-07An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SystemReboot metho…
CVE-2018-19078Critical9.82018-11-07An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The response to an ONVIF media GetStrea…
CVE-2018-19077High7.52018-11-07An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. RtspServer allows remote attackers to c…
CVE-2018-19076Critical9.82018-11-07An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5…
CVE-2018-19075Medium5.32018-11-07An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5…
CVE-2018-19074High7.52018-11-07An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5…
CVE-2018-19073High7.22018-11-07An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5…
CVE-2018-19072Medium5.52018-11-07An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5…
CVE-2018-19071High7.82018-11-07An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5…
CVE-2018-19070High7.22018-11-07An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5…
CVE-2018-19069Critical9.82018-11-07An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5…
CVE-2018-19068Medium4.92018-11-07An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The CGIProxy.fcgi?cmd=setTelnetSwitch f…
CVE-2018-19067Critical9.82018-11-07An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5…
CVE-2018-19066High7.52018-11-07An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5…
CVE-2018-19065High7.52018-11-07An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5…
CVE-2018-19064Critical9.82018-11-07An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5…
CVE-2018-19063Critical9.82018-11-07An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5…
CVE-2017-2877Critical9.82018-09-19A missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted r…
CVE-2017-2876High7.52018-09-19An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43…
CVE-2017-2873High7.22018-09-19An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52…
CVE-2017-2879Medium5.32018-09-19An exploitable buffer overflow vulnerability exists in the UPnP implementation used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A…
CVE-2017-2878High7.52018-09-19An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2…
CVE-2017-2875Critical9.12018-09-19An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43…
CVE-2017-2855High8.12018-09-19An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On device…
CVE-2017-2872High7.22018-09-17Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A HTTP request can…
CVE-2017-2857High8.12018-09-17An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On device…
CVE-2017-2856High8.12018-09-17An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On device…
CVE-2017-2854High8.12018-09-17An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On device…
CVE-2017-2874High7.52018-09-17An information disclosure vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A s…
CVE-2018-6832High7.52018-07-09Stack-based buffer overflow in the getSWFlag function in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI98…
CVE-2018-6831High7.22018-07-09The setSystemTime function in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI9851P V3, and FI9853EP V2 2.8…
CVE-2018-6830High7.52018-07-09Directory traversal vulnerability in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI9851P V3, and FI9853EP…
CVE-2017-2833High7.52018-04-24An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52…
CVE-2017-2832High7.22018-04-24An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52…
CVE-2017-2871High8.82018-04-17Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. An attacker who is…
CVE-2017-2851High7.22017-06-29In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can cause a buffer overflo…
CVE-2017-2850High8.82017-06-29In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to in…
CVE-2017-2849High8.82017-06-29In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to in…
CVE-2017-2848High8.82017-06-29In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to in…
CVE-2017-2847High8.82017-06-29In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to in…
CVE-2017-2846High8.82017-06-29In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to in…
CVE-2017-2845High8.82017-06-29An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52…
CVE-2017-2844High8.82017-06-29In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to in…
CVE-2017-2843High8.82017-06-27In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to…
CVE-2017-2842High8.82017-06-27In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to…
CVE-2017-2841High8.82017-06-27An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52…
CVE-2016-8731Critical9.82017-06-21Hard-coded FTP credentials (r:r) are included in the Foscam C1 running firmware 1.9.1.12. Knowledge of these credentials would allow remote access to any camer…
CVE-2017-2831High7.52017-06-21An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2…
CVE-2017-2830High7.52017-06-21An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2…
CVE-2017-2829Medium6.52017-06-21An exploitable directory traversal vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.5…
CVE-2017-2828High8.82017-06-21An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52…
CVE-2017-2827High8.82017-06-21An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52…
CVE-2017-2805Critical9.82017-06-21An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera. A specially crafted htt…
CVE-2017-7648High8.12017-04-10Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographi…
CVE-2014-18492014-05-14Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates credentials based on predictable camera subdomain names, which a…
CVE-2014-19112014-03-06The Foscam FI8910W camera with firmware before 11.37.2.55 allows remote attackers to obtain sensitive video and image data via a blank username and password.
CVE-2013-52152013-11-20Cross-site scripting (XSS) vulnerability in the web interface "WiFi scan" option in FOSCAM Wireless IP Cameras allows remote attackers to inject arbitrary web…
CVE-2013-25602013-03-15Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote attackers to read arbitrary files via a…
CVE-2012-30022012-12-21The web interface on (1) Foscam and (2) Wansview IP cameras allows remote attackers to bypass authentication, and perform administrative functions or read the…