CVE-2018-3938

N/A

Description

An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00. A specially crafted POST can cause a stack-based buffer overflow, resulting in remote code execution. An attacker can send a malicious POST request to trigger this vulnerability.

Details CVE

Score CVSS v3.1N/A

Publie8/14/2018

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

sony:snc-eb600sony:snc-eb600_firmwaresony:snc-eb600bsony:snc-eb600b_firmwaresony:snc-eb602rsony:snc-eb602r_firmwaresony:snc-eb630sony:snc-eb630_firmwaresony:snc-eb630bsony:snc-eb630b_firmwaresony:snc-eb632rsony:snc-eb632r_firmwaresony:snc-em600sony:snc-em600_firmwaresony:snc-em601sony:snc-em601_firmwaresony:snc-em602rsony:snc-em602r_firmwaresony:snc-em602rcsony:snc-em602rc_firmwaresony:snc-em630sony:snc-em630_firmwaresony:snc-em631sony:snc-em631_firmwaresony:snc-em632rsony:snc-em632r_firmwaresony:snc-em632rcsony:snc-em632rc_firmware

Faiblesses (CWE)

CWE-787

References

https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0605(talos-cna@cisco.com)

https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0605(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.