CVE-2018-3938

N/A

Descricao

An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00. A specially crafted POST can cause a stack-based buffer overflow, resulting in remote code execution. An attacker can send a malicious POST request to trigger this vulnerability.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado8/14/2018

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

sony:snc-eb600sony:snc-eb600_firmwaresony:snc-eb600bsony:snc-eb600b_firmwaresony:snc-eb602rsony:snc-eb602r_firmwaresony:snc-eb630sony:snc-eb630_firmwaresony:snc-eb630bsony:snc-eb630b_firmwaresony:snc-eb632rsony:snc-eb632r_firmwaresony:snc-em600sony:snc-em600_firmwaresony:snc-em601sony:snc-em601_firmwaresony:snc-em602rsony:snc-em602r_firmwaresony:snc-em602rcsony:snc-em602rc_firmwaresony:snc-em630sony:snc-em630_firmwaresony:snc-em631sony:snc-em631_firmwaresony:snc-em632rsony:snc-em632r_firmwaresony:snc-em632rcsony:snc-em632rc_firmware

Fraquezas (CWE)

CWE-787

Referencias

https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0605(talos-cna@cisco.com)

https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0605(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.