CVE-2019-25353 - Foscam Video Management System 1.1.4.9 - 'Username' Denial of Service

Back Back to CVE browser

MEDIUM

Foscam Video Management System 1.1.4.9 - 'Username' Denial of Service

Published Feb 18, 2026

4.6

MEDIUM

CVSS 4.0

EPSS 0.25%

Description

Foscam Video Management System 1.1.4.9 contains a denial of service vulnerability in the username input field that allows attackers to crash the application. Attackers can overwrite the username with a 520-byte buffer of repeated 'A' characters to trigger an application crash during device login.

Affected products

Vendor Diy Security SL Product Foscam Video Management System Default
n/a
- Version
  1.1.4.9
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Diy Security SL

Foscam Video Management System

n/a

Version	Status	Constraints
1.1.4.9	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (3)

https://www.exploit-db.com/exploits/47671
exploit
https://www.foscam.es/
product
https://www.vulncheck.com/advisories/foscam-video-management-system-username-denial-of-service
third-party-advisory

Link	Providers	Tags
https://www.exploit-db.com/exploits/47671		exploit
https://www.foscam.es/		product
https://www.vulncheck.com/advisories/foscam-video-management-system-username-denial-of-service		third-party-advisory