Unscored severity · published May 14, 2014
CVE-2014-1849
Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates credentials based on predictable camera subdomain names, which allows remote…
–
CVSS
12.1%
EPSS
No
On KEV
Description
Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates credentials based on predictable camera subdomain names, which allows remote attackers to spoof or hijack arbitrary cameras and conduct other attacks by modifying arbitrary camera records in the Foscam DNS server.
Exploitation
Is it being used?
Exploit prediction (EPSS)12.1% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IC
IP Camera Firmware · Foscam
11.37.2.49 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-1849
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-1849
blog.shekyan.com
http://blog.shekyan.com/2014/05/cve-2014-1849-foscam-dynamic-dns-predictable-credentials-vulnerability.html
seclists.org
http://seclists.org/fulldisclosure/2014/May/35
Exploit
https://github.com/artemharutyunyan/getmecamtool/blob/master/src/dnsmod.c