製品・ソフトウェアに関する情報

JVN脆弱性詳細

複数の Foscam カメラにおけるコマンドインジェクションの脆弱性

Title	複数の Foscam カメラにおけるコマンドインジェクションの脆弱性
Summary	複数の Foscam カメラには、コマンドインジェクションの脆弱性が存在します。本脆弱性は、CVE-2017-2849 の不完全な修正に起因します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	May 18, 2018, midnight
Registration Date	Oct. 5, 2018, 2:36 p.m.
Last Update	Oct. 5, 2018, 2:36 p.m.

CVSS3.0 : 重要
Score	7.2
Vector	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS2.0 : 危険
Score	9
Vector	AV:N/AC:L/Au:S/C:C/I:C/A:C

Affected System

Foscam

C1 Lite ファームウェア

C1 ファームウェア

C2 ファームウェア

FI9800P ファームウェア

FI9900P ファームウェア

R2 ファームウェア

R4 ファームウェア

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2018-6831	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6831
National Vulnerability Database (NVD)
2	CVE-2018-6831	https://nvd.nist.gov/vuln/detail/CVE-2018-6831

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-77	https://cwe.mitre.org/data/definitions/77.html

ベンダー情報

No	Name	URL
Foscam
1	Securing Your Foscam Camera - Important Notice	https://www.foscam.com/company/securing-your-foscam-camera-important-notice.html

その他

No	Name	URL
関連文書
1	Major Vulnerabilities in Foscam Cameras	https://blog.vdoo.com/2018/06/06/vdoo-has-found-major-vulnerabilities-in-foscam-cameras/

Change Log

No	Changed Details	Date of change
1	[2018年10月05日] 掲載	Oct. 5, 2018, 2:36 p.m.

NVD Vulnerability Information

CVE-2018-6831

Summary	The setSystemTime function in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI9851P V3, and FI9853EP V2 2.84.2.33 and earlier, FI9816P V3, FI9821EP V2, FI9821P V3, FI9826P V3, and FI9831P V3 2.81.2.33 and earlier, C1, C1 V2, C1 Lite, and C1 Lite V2 2.52.2.47 and earlier, FI9800P, FI9800P V2, FI9803P V2, FI9803P V3, and FI9851P V2 2.54.2.47 and earlier, FI9815P, FI9815P V2, FI9816P, and FI9816P V2, 2.51.2.47 and earlier, R2 and R4 2.71.1.59 and earlier, C2 and FI9961EP 2.72.1.59 and earlier, FI9900EP, FI9900P, and FI9901EP 2.74.1.59 and earlier, FI9928P 2.74.1.58 and earlier, FI9803EP and FI9853EP 2.22.2.31 and earlier, FI9803P and FI9851P 2.24.2.31 and earlier, FI9821P V2, FI9826P V2, FI9831P V2, and FI9821EP 2.21.2.31 and earlier, FI9821W V2, FI9831W, FI9826W, FI9821P, FI9831P, and FI9826P 2.11.1.120 and earlier, FI9818W V2 2.13.2.120 and earlier, FI9805W, FI9804W, FI9804P, FI9805E, and FI9805P 2.14.1.120 and earlier, FI9828P, and FI9828W 2.13.1.120 and earlier, and FI9828P V2 2.11.1.133 and earlier allows remote authenticated users to execute arbitrary commands via a ';' in the ntpServer argument. NOTE: this issue exists because of an incomplete fix for CVE-2017-2849.
Publication Date	July 10, 2018, 2:29 a.m.
Registration Date	March 1, 2021, 7:36 p.m.
Last Update	Nov. 21, 2024, 1:11 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:o:foscam:c1_lite_firmware::::::::			2.82.2.33
execution environment
1	cpe:2.3:h:foscam:c1_lite:3:::::::*

Configuration2		or higher	or less	more than	less than
cpe:2.3:o:foscam:c1_firmware::::::::			2.82.2.33
execution environment
1	cpe:2.3:h:foscam:c1:3:::::::*

Configuration3		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9800p_firmware::::::::			2.81.2.33
execution environment
1	cpe:2.3:h:foscam:fi9800p:3:::::::*

Configuration4		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9821ep_firmware::::::::			2.81.2.33
execution environment
1	cpe:2.3:h:foscam:fi9821ep:2:::::::*

Configuration5		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9821p_firmware::::::::			2.81.2.33
execution environment
1	cpe:2.3:h:foscam:fi9821p:3:::::::*

Configuration6		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9826p_firmware::::::::			2.81.2.33
execution environment
1	cpe:2.3:h:foscam:fi9826p:3:::::::*

Configuration7		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9831p_firmware::::::::			2.81.2.33
execution environment
1	cpe:2.3:h:foscam:fi9831p:3:::::::*

Configuration8		or higher	or less	more than	less than
cpe:2.3:o:foscam:c1_firmware::::::::			2.52.2.47
execution environment
1	cpe:2.3:h:foscam:c1:-:::::::*

Configuration9		or higher	or less	more than	less than
cpe:2.3:o:foscam:c1_firmware::::::::			2.52.2.47
execution environment
1	cpe:2.3:h:foscam:c1:2:::::::*

Configuration10		or higher	or less	more than	less than
cpe:2.3:o:foscam:c1_lite_firmware::::::::			2.52.2.47
execution environment
1	cpe:2.3:h:foscam:c1_lite:-:::::::*

Configuration11		or higher	or less	more than	less than
cpe:2.3:o:foscam:c1_lite_firmware::::::::			2.52.2.47
execution environment
1	cpe:2.3:h:foscam:c1_lite:2:::::::*

Configuration12		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9800p_firmware::::::::			2.54.2.47
execution environment
1	cpe:2.3:h:foscam:fi9800p:-:::::::*

Configuration13		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9800p_firmware::::::::			2.54.2.47
execution environment
1	cpe:2.3:h:foscam:fi9800p:2:::::::*

Configuration14		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9803p_firmware::::::::			2.54.2.47
execution environment
1	cpe:2.3:h:foscam:fi9803p:2:::::::*

Configuration15		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9803p_firmware::::::::			2.54.2.47
execution environment
1	cpe:2.3:h:foscam:fi9803p:3:::::::*

Configuration16		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9851p_firmware::::::::			2.54.2.47
execution environment
1	cpe:2.3:h:foscam:fi9851p:2:::::::*

Configuration17		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9815p_firmware::::::::			2.51.2.47
execution environment
1	cpe:2.3:h:foscam:fi9815p:-:::::::*

Configuration18		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9815p_firmware::::::::			2.51.2.47
execution environment
1	cpe:2.3:h:foscam:fi9815p:2:::::::*

Configuration19		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9816p_firmware::::::::			2.51.2.47
execution environment
1	cpe:2.3:h:foscam:fi9816p:-:::::::*

Configuration20		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9816p_firmware::::::::			2.51.2.47
execution environment
1	cpe:2.3:h:foscam:fi9816p:2:::::::*

Configuration21		or higher	or less	more than	less than
cpe:2.3:o:foscam:r2_firmware::::::::			2.71.1.59
execution environment
1	cpe:2.3:h:foscam:r2:-:::::::*

Configuration22		or higher	or less	more than	less than
cpe:2.3:o:foscam:r4_firmware::::::::			2.71.1.59
execution environment
1	cpe:2.3:h:foscam:r4:-:::::::*

Configuration23		or higher	or less	more than	less than
cpe:2.3:o:foscam:c2_firmware::::::::			2.72.1.59
execution environment
1	cpe:2.3:h:foscam:c2:-:::::::*

Configuration24		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9961ep_firmware::::::::			2.72.1.59
execution environment
1	cpe:2.3:h:foscam:fi9961ep:-:::::::*

Configuration25		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9900ep_firmware::::::::			2.74.1.59
execution environment
1	cpe:2.3:h:foscam:fi9900ep:-:::::::*

Configuration26		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9900p_firmware::::::::			2.74.1.59
execution environment
1	cpe:2.3:h:foscam:fi9900p:-:::::::*

Configuration27		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9901ep_firmware::::::::			2.74.1.59
execution environment
1	cpe:2.3:h:foscam:fi9901ep:-:::::::*

Configuration28		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9928p_firmware::::::::			2.74.1.58
execution environment
1	cpe:2.3:h:foscam:fi9928p:-:::::::*

Configuration29		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9803ep_firmware::::::::			2.22.2.31
execution environment
1	cpe:2.3:h:foscam:fi9803ep:-:::::::*

Configuration30		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9853ep_firmware::::::::			2.22.2.31
execution environment
1	cpe:2.3:h:foscam:fi9853ep:-:::::::*

Configuration31		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9803p_firmware::::::::			2.24.2.31
execution environment
1	cpe:2.3:h:foscam:fi9803p:-:::::::*

Configuration32		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9851p_firmware::::::::			2.24.2.31
execution environment
1	cpe:2.3:h:foscam:fi9851p:-:::::::*

Configuration33		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9821p_firmware::::::::			2.21.2.31
execution environment
1	cpe:2.3:h:foscam:fi9821p:2:::::::*

Configuration34		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9826p_firmware::::::::			2.21.2.31
execution environment
1	cpe:2.3:h:foscam:fi9826p:2:::::::*

Configuration35		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9831p_firmware::::::::			2.21.2.31
execution environment
1	cpe:2.3:h:foscam:fi9831p:2:::::::*

Configuration36		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9821ep_firmware::::::::			2.21.2.31
execution environment
1	cpe:2.3:h:foscam:fi9821ep:-:::::::*

Configuration37		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9821w_firmware::::::::			2.11.1.120
execution environment
1	cpe:2.3:h:foscam:fi9821w:2:::::::*

Configuration38		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9831w_firmware::::::::			2.11.1.120
execution environment
1	cpe:2.3:h:foscam:fi9831w:-:::::::*

Configuration39		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9826w_firmware::::::::			2.11.1.120
execution environment
1	cpe:2.3:h:foscam:fi9826w:-:::::::*

Configuration40		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9821p_firmware::::::::			2.11.1.120
execution environment
1	cpe:2.3:h:foscam:fi9821p:-:::::::*

Configuration41		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9831p_firmware::::::::			2.11.1.120
execution environment
1	cpe:2.3:h:foscam:fi9831p:-:::::::*

Configuration42		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9826p_firmware::::::::			2.11.1.120
execution environment
1	cpe:2.3:h:foscam:fi9826p:-:::::::*

Configuration43		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9818w_firmware::::::::			2.13.2.120
execution environment
1	cpe:2.3:h:foscam:fi9818w:2:::::::*

Configuration44		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9805w_firmware::::::::			2.14.1.120
execution environment
1	cpe:2.3:h:foscam:fi9805w:-:::::::*

Configuration45		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9804w_firmware::::::::			2.14.1.120
execution environment
1	cpe:2.3:h:foscam:fi9804w:-:::::::*

Configuration46		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9804p_firmware::::::::			2.14.1.120
execution environment
1	cpe:2.3:h:foscam:fi9804p:-:::::::*

Configuration47		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9805e_firmware::::::::			2.14.1.120
execution environment
1	cpe:2.3:h:foscam:fi9805e:-:::::::*

Configuration48		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9805p_firmware::::::::			2.14.1.120
execution environment
1	cpe:2.3:h:foscam:fi9805p:-:::::::*

Configuration49		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9828p_firmware::::::::			2.13.1.120
execution environment
1	cpe:2.3:h:foscam:fi9828p:-:::::::*

Configuration50		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9828w_firmware::::::::			2.13.1.120
execution environment
1	cpe:2.3:h:foscam:fi9828w:-:::::::*

Configuration51		or higher	or less	more than	less than
cpe:2.3:o:foscam:fi9828p_firmware::::::::			2.11.1.133
execution environment
1	cpe:2.3:h:foscam:fi9828p:2:::::::*

Related information, measures and tools

No	URL	タグ
1	https://blog.vdoo.com/2018/06/06/vdoo-has-found-major-vulnerabilities-in-foscam-cameras/	Exploit Third Party Advisory
2	https://blog.vdoo.com/2018/06/06/vdoo-has-found-major-vulnerabilities-in-foscam-cameras/	Exploit Third Party Advisory
3	https://www.foscam.com/company/securing-your-foscam-camera-important-notice.html	Vendor Advisory
4	https://www.foscam.com/company/securing-your-foscam-camera-important-notice.html	Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-78	OSコマンド・インジェクション	https://cwe.mitre.org/data/definitions/78.html