rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-19007 
In Geutebrueck GmbH E2 Camera Series versions prior to 1.12.0.25 the DDNS configuration (in the Network Configuration panel) is vulnerable to an OS system command injection as root.
Problem types: cwe_id: CWE-78
description: IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS USED IN AN OS COMMAND ('OS COMMAND INJECTION') CWE-78
Affected products: vendor: n/a
product: Geutebr&#195;&#188;ck GmbH E2 Camera Series versions prior to 1.12.0.25
Published: 2018-12-14T20:00:00.000Z
CVE-2018-19008 
The TextEditor 2.0 in ABB CP400 Panel Builder versions 2.0.7.05 and earlier contain a vulnerability in the file parser of the Text Editor wherein the application doesn't properly prevent the insertion of specially crafted files which could allow arbitrary code execution.
Problem types: cwe_id: CWE-20
description: IMPROPER INPUT VALIDATION CWE-20
Affected products: vendor: ICS-CERT
product: ABB CP400 Panel Builder TextEditor 2.0
Published: 2019-02-13T21:00:00.000Z
CVE-2018-19009 
Pilz PNOZmulti Configurator prior to version 10.9 allows an authenticated attacker with local access to the system containing the PNOZmulti Configurator software to view sensitive credential data in clear-text. This sensitive data is applicable to only the PMI m107 diag HMI device. An attacker with access to this sensitive data and physical access to the PMI m107 diag can modify data on the HMI device.
Problem types: cwe_id: CWE-312
description: CLEARTEXT STORAGE OF SENSITIVE INFORMATION CWE-312
Affected products: vendor: Pilz
product: Pilz PNOZmulti Configurator
Published: 2019-01-25T20:00:00.000Z
CVE-2018-19010 
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. A malformed network packet may cause the monitor to reboot. By repeatedly sending the malformed network packet, an attacker may be able to disrupt patient monitoring by causing the monitor to repeatedly reboot until it falls back to default configuration and loses network connectivity.
Problem types: cwe_id: CWE-20
description: IMPROPER INPUT VALIDATION CWE-20
Affected products: vendor: ICS-CERT
product: Dr&#195;&#164;ger Infinity Delta
Published: 2019-01-28T22:00:00.000Z
CVE-2018-19011 
CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file. An attacker could exploit this to execute code under the privileges of the application.
Problem types: cwe_id: CWE-94
description: IMPROPER CONTROL OF GENERATION OF CODE ('CODE INJECTION') CWE-94
Affected products: vendor: ICS-CERT
product: CX-Supervisor
Published: 2019-01-22T20:00:00.000Z
CVE-2018-19012 
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Via a specific dialog it is possible to break out of the kiosk mode and reach the underlying operating system. By breaking out of the kiosk mode, an attacker is able to take control of the operating system.
Problem types: cwe_id: CWE-269
description: IMPROPER PRIVILEGE MANAGEMENT CWE-269
Affected products: vendor: ICS-CERT
product: Dr&#195;&#164;ger Infinity Delta
Published: 2019-01-28T21:00:00.000Z
CVE-2018-19013 
An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file.
Problem types: cwe_id: CWE-77
description: IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS USED IN A COMMAND ('COMMAND INJECTION') CWE-77
Affected products: vendor: ICS-CERT
product: CX-Supervisor
Published: 2019-01-22T20:00:00.000Z
CVE-2018-19014 
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Log files are accessible over an unauthenticated network connection. By accessing the log files, an attacker is able to gain insights about internals of the patient monitor, the location of the monitor, and wired network configuration.
Problem types: cwe_id: CWE-532
description: INFORMATION EXPOSURE THROUGH LOG FILES CWE-532
Affected products: vendor: ICS-CERT
product: Dr&#195;&#164;ger Infinity Delta
Published: 2019-01-28T22:00:00.000Z
CVE-2018-19015 
An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file. An attacker could exploit this to execute code under the privileges of the application.
Problem types: cwe_id: CWE-77
description: IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS USED IN A COMMAND ('COMMAND INJECTION') CWE-77
Affected products: vendor: ICS-CERT
product: CX-Supervisor
Published: 2019-01-28T19:00:00.000Z
CVE-2018-19016 
Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB (includes 1756-EWEBK) Version 5.001 and earlier, and CompactLogix 1768-EWEB Version 2.005 and earlier. A remote attacker could send a crafted UDP packet to the SNMP service causing a denial-of-service condition to occur until the affected product is restarted.
Problem types: cwe_id: CWE-20
description: IMPROPER INPUT VALIDATION CWE-20
Affected products: vendor: Rockwell
product: Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB (includes 1756-EWEBK) Version 5.001 and earlier, and CompactLogix 1768-EWEB Version 2.005 and earlier.
Published: 2019-03-27T17:20:15.000Z
CVE-2018-19017 
Several use after free vulnerabilities have been identified in CX-Supervisor (Versions 3.42 and prior). When processing project files, the application fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
Problem types: cwe_id: CWE-416
description: USE AFTER FREE CWE-416
Affected products: vendor: ICS-CERT
product: CX-Supervisor
Published: 2019-01-22T20:00:00.000Z
CVE-2018-19018 
An access of uninitialized pointer vulnerability in CX-Supervisor (Versions 3.42 and prior) could lead to type confusion when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
Problem types: cwe_id: CWE-824
description: ACCESS OF UNINITIALIZED POINTER CWE-824
Affected products: vendor: ICS-CERT
product: CX-Supervisor
Published: 2019-02-12T22:00:00.000Z
CVE-2018-19019 
A type confusion vulnerability exists when processing project files in CX-Supervisor (Versions 3.42 and prior). An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
Problem types: cwe_id: CWE-843
description: ACCESS OF RESOURCE USING INCOMPATIBLE TYPE ('TYPE CONFUSION') CWE-843
Affected products: vendor: ICS-CERT
product: CX-Supervisor
Published: 2019-01-22T20:00:00.000Z
CVE-2018-19020 
When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attacker can force the application to read a value outside of an array.
Problem types: cwe_id: CWE-125
description: OUT-OF-BOUNDS READ CWE-125
Affected products: vendor: ICS-CERT
product: CX-Supervisor
Published: 2019-02-12T22:00:00.000Z
CVE-2018-19021 
A specially crafted script could bypass the authentication of a maintenance port of Emerson DeltaV DCS Versions 11.3.1, 11.3.2, 12.3.1, 13.3.1, 14.3, R5.1, R6 and prior, which may allow an attacker to cause a denial of service.
Problem types: cwe_id: CWE-307
description: Authentication Bypass CWE-307
Affected products: vendor: Emerson
product: Emerson DeltaV
Published: 2019-01-25T20:00:00.000Z
CVE-2018-19023 
Hetronic Nova-M prior to verson r161 uses fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state.
Problem types: cwe_id: CWE-294
description: AUTHENTICATION BYPASS BY CAPTURE-REPLAY CWE-294
Affected products: vendor: Hetronic
product: Hetronic Nova-M
Published: 2019-01-25T20:00:00.000Z
CVE-2018-19025 
In JUUKO K-808, an attacker could specially craft a packet that encodes an arbitrary command, which could be executed on the K-808 (Firmware versions prior to numbers ending ...9A, ...9B, ...9C, etc.).
Problem types: cwe_id: CWE-294
description: AUTHENTICATION BYPASS BY CAPTURE-REPLAY CWE-294
Affected products: vendor: n/a
product: JUUKO K-808
Published: 2020-11-02T16:48:15.000Z
CVE-2018-19027 
Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
Problem types: cwe_id: CWE-843
description: ACCESS OF RESOURCE USING INCOMPATIBLE TYPE ('TYPE CONFUSION') CWE-843
Affected products: vendor: Omron
product: CX-Protocol within CX-One
Published: 2019-01-30T16:00:00.000Z
CVE-2018-19029 
LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlled memory address, which may allow remote code execution, data exfiltration, or cause a system crash.
Problem types: cwe_id: CWE-822
description: UNTRUSTED POINTER DEREFERENCE CWE-822
Affected products: vendor: LCDS
product: LCDS Laquis SCADA
Published: 2019-02-05T18:00:00.000Z
CVE-2018-19031 
A command injection vulnerability exists when the authorized user passes crafted parameter to background process in the router. This affects 360 router series products (360 Safe Router P0,P1,P2,P3,P4), the affected version is V2.0.61.58897.
Problem types: description: Local Code Execution
Affected products: vendor: 360 Security Technology, Inc.
product: 360 Safe Router
Published: 2019-11-04T14:42:42.000Z
CVE-2018-19036 
An issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-17T18:00:00.000Z
CVE-2018-19037 
On Virgin Media wireless router 3.0 hub devices, the web interface is vulnerable to denial of service. When POST requests are sent and keep the connection open, the router lags and becomes unusable to anyone currently using the web interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T12:13:41.000Z
CVE-2018-19039 
Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-13T19:00:00.000Z
CVE-2018-19040 
The Media File Manager plugin 1.4.2 for WordPress allows directory listing via a ../ directory traversal in the dir parameter of an mrelocator_getdir action to the wp-admin/admin-ajax.php URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-31T19:00:00.000Z
CVE-2018-19041 
The Media File Manager plugin 1.4.2 for WordPress allows XSS via the dir parameter of an mrelocator_getdir action to the wp-admin/admin-ajax.php URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-31T19:00:00.000Z
CVE-2018-19042 
The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file movement via a ../ directory traversal in the dir_from and dir_to parameters of an mrelocator_move action to the wp-admin/admin-ajax.php URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-31T19:00:00.000Z
CVE-2018-19043 
The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file renaming (specifying a "from" and "to" filename) via a ../ directory traversal in the dir parameter of an mrelocator_rename action to the wp-admin/admin-ajax.php URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-31T19:00:00.000Z
CVE-2018-19044 
keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats. This allowed local users to overwrite arbitrary files if fs.protected_symlinks is set to 0, as demonstrated by a symlink from /tmp/keepalived.data or /tmp/keepalived.stats to /etc/passwd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-08T20:00:00.000Z
CVE-2018-19045 
keepalived 2.0.8 used mode 0666 when creating new temporary files upon a call to PrintData or PrintStats, potentially leaking sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-08T20:00:00.000Z
CVE-2018-19046 
keepalived 2.0.8 didn't check for existing plain files when writing data to a temporary file upon a call to PrintData or PrintStats. If a local attacker had previously created a file with the expected name (e.g., /tmp/keepalived.data or /tmp/keepalived.stats), with read access for the attacker and write access for the keepalived process, then this potentially leaked sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-08T20:00:00.000Z
CVE-2018-19047 
mPDF through 7.1.6, if deployed as a web application that accepts arbitrary HTML, allows SSRF, as demonstrated by a '<img src="http://192.168' substring that triggers a call to getImage in Image/ImageProcessor.php. NOTE: the software maintainer disputes this, stating "If you allow users to pass HTML without sanitising it, you're asking for trouble.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T05:00:00.000Z
CVE-2018-19048 
Simditor through 2.3.21 allows DOM XSS via an onload attribute within a malformed SVG element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T13:13:27.000Z
CVE-2018-19050 
MetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword langset parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T04:00:00.000Z
CVE-2018-19051 
MetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword abt_type parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T04:00:00.000Z
CVE-2018-19052 
An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing '/' character, but the alias target filesystem path does have a trailing '/' character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T05:00:00.000Z
CVE-2018-19053 
PbootCMS 1.2.2 allows remote attackers to execute arbitrary PHP code by specifying a .php filename in a "SET GLOBAL general_log_file" statement, followed by a SELECT statement containing this PHP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T05:00:00.000Z
CVE-2018-19056 
pandao Editor.md 1.5.0 has DOM XSS via input starting with a "<<" substring, which is mishandled during construction of an A element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T15:00:00.000Z
CVE-2018-19057 
SimpleMDE 1.11.2 has XSS via an onerror attribute of a crafted IMG element, or via certain input with [ and ( characters, which is mishandled during construction of an A element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T15:00:00.000Z
CVE-2018-19058 
An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a stream check before saving an embedded file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T16:00:00.000Z
CVE-2018-19059 
An issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in FileSpec.cc, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating embedded files before save attempts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T16:00:00.000Z
CVE-2018-19060 
An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating a filename of an embedded file before constructing a save path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T16:00:00.000Z
CVE-2018-19061 
DedeCMS 5.7 SP2 has SQL Injection via the dede\co_do.php ids parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T17:00:00.000Z
CVE-2018-19063 
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The admin account has a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T18:00:00.000Z
CVE-2018-19064 
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ftpuser1 account has a blank password, which cannot be changed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T18:00:00.000Z
CVE-2018-19065 
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The exported device configuration is encrypted with the hardcoded BpP+2R9*Q password in some cases.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T18:00:00.000Z
CVE-2018-19066 
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The exported device configuration is encrypted with the hardcoded Pxift* password in some cases.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T18:00:00.000Z
CVE-2018-19067 
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. There is a hardcoded Ak47@99 password for the factory~ account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T18:00:00.000Z
CVE-2018-19068 
An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for hidden factory credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T18:00:00.000Z
CVE-2018-19069 
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for the root user with a password of toor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T18:00:00.000Z
CVE-2018-19070 
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow remote attackers to execute arbitrary OS commands via shell metacharacters in the usrName parameter of a CGIProxy.fcgi addAccount action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T18:00:00.000Z
CVE-2018-19071 
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. /mnt/mtd/boot.sh has 0777 permissions, allowing local users to control the commands executed at system start-up.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T18:00:00.000Z
CVE-2018-19072 
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. /mnt/mtd/app has 0777 permissions, allowing local users to replace an archive file (within that directory) to control what is extracted to RAM at boot time.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T18:00:00.000Z
CVE-2018-19073 
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow attackers to execute arbitrary OS commands via shell metacharacters in the modelName, by leveraging /mnt/mtd/app/config/ProductConfig.xml write access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T18:00:00.000Z
CVE-2018-19074 
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The firewall has no effect except for blocking port 443 and partially blocking port 88.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T18:00:00.000Z
CVE-2018-19075 
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The firewall feature makes it easier for remote attackers to ascertain credentials and firewall rules because invalid credentials lead to error -2, whereas rule-based blocking leads to error -8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T18:00:00.000Z
CVE-2018-19076 
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The FTP and RTSP services make it easier for attackers to conduct brute-force authentication attacks, because failed-authentication limits apply only to HTTP (not FTP or RTSP).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T18:00:00.000Z
CVE-2018-19077 
An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. RtspServer allows remote attackers to cause a denial of service (daemon hang or restart) via a negative integer in the RTSP Content-Length header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T18:00:00.000Z
CVE-2018-19078 
An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The response to an ONVIF media GetStreamUri request contains the administrator username and password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T18:00:00.000Z
CVE-2018-19079 
An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SystemReboot method allows unauthenticated reboot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-07T18:00:00.000Z