CVE-2018-19076

Name of the Vulnerable Software and Affected Versions Foscam C2 versions 1.11.1.8 Opticam i5 versions 1.5.2.11

Description An issue was discovered that makes it easier for attackers to conduct brute-force authentication attacks. The FTP and RTSP services do not have failed-authentication limits, unlike HTTP, which makes them more susceptible to such attacks.

Recommendations For Foscam C2 version 1.11.1.8, consider restricting access to the FTP and RTSP services until a patch is available. For Opticam i5 version 1.5.2.11, consider restricting access to the FTP and RTSP services until a patch is available. As a temporary workaround, consider implementing additional authentication measures, such as IP blocking or rate limiting, to minimize the risk of exploitation.