CVE-2018-19068: Foscam c2 Application Firmware

Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for hidden factory credentials.

Affected products

• Foscam c2 Application Firmware: version 2.72.1.32 only
• Foscam c2 System Firmware: version 1.11.1.8 only
• Opticam i5 Application Firmware: version 2.21.1.128 only
• Opticam i5 System Firmware: version 1.5.2.11 only

Published 2018-11-07. Last modified 2026-06-17.