### [CVE-2018-19071](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19071)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. /mnt/mtd/boot.sh has 0777 permissions, allowing local users to control the commands executed at system start-up.

### POC

#### Reference
- https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
- https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt

#### Github
No PoCs found on GitHub currently.