CVE-2018-3938

N/A

Beschreibung

An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00. A specially crafted POST can cause a stack-based buffer overflow, resulting in remote code execution. An attacker can send a malicious POST request to trigger this vulnerability.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht8/14/2018

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

sony:snc-eb600sony:snc-eb600_firmwaresony:snc-eb600bsony:snc-eb600b_firmwaresony:snc-eb602rsony:snc-eb602r_firmwaresony:snc-eb630sony:snc-eb630_firmwaresony:snc-eb630bsony:snc-eb630b_firmwaresony:snc-eb632rsony:snc-eb632r_firmwaresony:snc-em600sony:snc-em600_firmwaresony:snc-em601sony:snc-em601_firmwaresony:snc-em602rsony:snc-em602r_firmwaresony:snc-em602rcsony:snc-em602rc_firmwaresony:snc-em630sony:snc-em630_firmwaresony:snc-em631sony:snc-em631_firmwaresony:snc-em632rsony:snc-em632r_firmwaresony:snc-em632rcsony:snc-em632rc_firmware

Schwachen (CWE)

CWE-787

Referenzen

https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0605(talos-cna@cisco.com)

https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0605(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.