CVE-2019-25437 - Foscam Video Management System 1.1.6.6 Buffer Overflow Denial of Service

Back Back to CVE browser

MEDIUM

Foscam Video Management System 1.1.6.6 Buffer Overflow Denial of Service

Published Feb 20, 2026

6.7

MEDIUM

CVSS 4.0

EPSS 0.14%

Description

Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 5000-character buffer into the UID parameter during device addition to trigger an application crash when the Login Check function is invoked.

Affected products

Vendor Foscam Product Foscam Video Management System Default
n/a
- Version
  1.1.6.6
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Foscam

Foscam Video Management System

n/a

Version	Status	Constraints
1.1.6.6	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-121

References (3)

https://www.exploit-db.com/exploits/47478
exploit
https://www.foscam.com/
product
https://www.vulncheck.com/advisories/foscam-video-management-system-buffer-overflow-denial-of-service
third-party-advisory

Link	Providers	Tags
https://www.exploit-db.com/exploits/47478		exploit
https://www.foscam.com/		product
https://www.vulncheck.com/advisories/foscam-video-management-system-buffer-overflow-denial-of-service		third-party-advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulnCheck

Published Feb 20, 2026

Updated Apr 7, 2026

Reserved Feb 19, 2026

Link CVE-2019-25437

CISA Vulnrichment

Updated Feb 24, 2026

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2019-25437

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-25437