CVE-2018-3937

N/A

Descricao

An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00. A specially crafted GET request can cause arbitrary commands to be executed. An attacker can send an HTTP request to trigger this vulnerability.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado8/14/2018

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

sony:snc-eb600sony:snc-eb600_firmwaresony:snc-eb600bsony:snc-eb600b_firmwaresony:snc-eb602rsony:snc-eb602r_firmwaresony:snc-eb630sony:snc-eb630_firmwaresony:snc-eb630bsony:snc-eb630b_firmwaresony:snc-eb632rsony:snc-eb632r_firmwaresony:snc-em600sony:snc-em600_firmwaresony:snc-em601sony:snc-em601_firmwaresony:snc-em602rsony:snc-em602r_firmwaresony:snc-em602rcsony:snc-em602rc_firmwaresony:snc-em630sony:snc-em630_firmwaresony:snc-em631sony:snc-em631_firmwaresony:snc-em632rsony:snc-em632r_firmwaresony:snc-em632rcsony:snc-em632rc_firmware

Fraquezas (CWE)

CWE-78

Referencias

https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0604(talos-cna@cisco.com)

https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0604(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.