CVE:CVE-2018-19070
CNNVD:CNNVD-201811-147
Foscam C2和Opticam i5都是中国福斯康姆（FOSCAM）公司的网络摄像机产品。
Foscam C2和Opticam i5设备中存在安全漏洞。远程攻击者可借助‘usrName’参数中的shell元字符利用该漏洞执行任意OS命令。以下产品和版本受到影响：Foscam C2 devices with System Firmware 1.11.1.8版本和Application Firmware 2.72.1.32版本；Opticam i5 devices with System Firmware 1.5.2.11版本和Application Firmware 2.21.1.128版本。
solution:Upgrade opticam i5_application_firmware to a higher version than 2.21.1.128,and avoid the version 2.21.1.128; Upgrade opticam i5_system_firmware to a higher version than 1.5.2.11,and avoid the version 1.5.2.11; Upgrade foscam c2_application_firmware to a higher version than 2.72.1.32,and avoid the version 2.72.1.32; Upgrade foscam c2_system_firmware to a higher version than 1.11.1.8,and avoid the version 1.11.1.8