critical9.1
CVE-2018-3938
An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00.
Impact
An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00. A specially crafted POST can cause a stack-based buffer overflow, resulting in remote code execution. An attacker can send a malicious POST request to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sony | Snc-Eb600 Firmware | Version 1.87.00 |
| Sony | Snc-Eb630 Firmware | Version 1.87.00 |
| Sony | Snc-Eb600b Firmware | Version 1.87.00 |
| Sony | Snc-Eb630b Firmware | Version 1.87.00 |
| Sony | Snc-Eb602r Firmware | Version 1.87.00 |
| Sony | Snc-Eb632r Firmware | Version 1.87.00 |
| Sony | Snc-Em600 Firmware | Version 1.87.00 |
| Sony | Snc-Em601 Firmware | Version 1.87.00 |
| Sony | Snc-Em630 Firmware | Version 1.87.00 |
| Sony | Snc-Em631 Firmware | Version 1.87.00 |
| Sony | Snc-Em602r Firmware | Version 1.87.00 |
| Sony | Snc-Em632r Firmware | Version 1.87.00 |