CVE-2019-25353
Published: 18 February 2026
Summary
CVE-2019-25353 is a medium-severity Classic Buffer Overflow (CWE-120) vulnerability in Foscam Video Management (inferred from references). Its CVSS base score is 4.6 (Medium).
Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 13.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SC-5 (Denial-of-service Protection) and SI-10 (Information Input Validation).
Deeper analysis
CVE-2019-25353 is a denial-of-service vulnerability in Foscam Video Management System version 1.1.4.9. The flaw exists in the username input field during device login, where attackers can trigger a buffer overflow (CWE-120) by supplying a 520-byte buffer of repeated 'A' characters, causing the application to crash. The vulnerability carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Unauthenticated remote attackers can exploit this vulnerability over the network with low complexity and no user interaction required. Successful exploitation results in a denial of service, rendering the application unavailable by crashing it during login attempts, with high impact to availability but no effects on confidentiality or integrity.
Advisories and references include a proof-of-concept exploit on Exploit-DB at https://www.exploit-db.com/exploits/47671 and a VulnCheck advisory at https://www.vulncheck.com/advisories/foscam-video-management-system-username-denial-of-service. The vendor site is available at https://www.foscam.es/.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2019-19643
Vulnerability details
Foscam Video Management System 1.1.4.9 contains a denial of service vulnerability in the username input field that allows attackers to crash the application. Attackers can overwrite the username with a 520-byte buffer of repeated 'A' characters to trigger an application…
more
crash during device login.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in login input directly enables application crash via exploitation, matching T1499.004 Endpoint Denial of Service (Application or System Exploitation).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Requires validation of username inputs to reject oversized 520-byte buffers that trigger the buffer overflow and application crash.
Protects against denial-of-service events by limiting the effects of unauthenticated remote attacks causing application crashes during login.
Enforces limits on input quantity, such as maximum username length, to block buffer overflow attempts during device login.