high
8.8
CWE
200
Advisory Published
Updated

CVE-2016-7834: Infoleak

First published: Thu Apr 13 2017(Updated: )

SONY SNC-CH115, SNC-CH120, SNC-CH160, SNC-CH220, SNC-CH260, SNC-DH120, SNC-DH120T, SNC-DH160, SNC-DH220, SNC-DH220T, SNC-DH260, SNC-EB520, SNC-EM520, SNC-EM521, SNC-ZB550, SNC-ZM550, SNC-ZM551, SNC-EP550, SNC-EP580, SNC-ER550, SNC-ER550C, SNC-ER580, SNC-ER585, SNC-ER585H, SNC-ZP550, SNC-ZR550, SNC-EP520, SNC-EP521, SNC-ER520, SNC-ER521, SNC-ER521C network cameras with firmware before Ver.1.86.00 and SONY SNC-CX600, SNC-CX600W, SNC-EB600, SNC-EB600B, SNC-EB602R, SNC-EB630, SNC-EB630B, SNC-EB632R, SNC-EM600, SNC-EM601, SNC-EM602R, SNC-EM602RC, SNC-EM630, SNC-EM631, SNC-EM632R, SNC-EM632RC, SNC-VB600, SNC-VB600B, SNC-VB600B5, SNC-VB630, SNC-VB6305, SNC-VB6307, SNC-VB632D, SNC-VB635, SNC-VM600, SNC-VM600B, SNC-VM600B5, SNC-VM601, SNC-VM601B, SNC-VM602R, SNC-VM630, SNC-VM6305, SNC-VM6307, SNC-VM631, SNC-VM632R, SNC-WR600, SNC-WR602, SNC-WR602C, SNC-WR630, SNC-WR632, SNC-WR632C, SNC-XM631, SNC-XM632, SNC-XM636, SNC-XM637, SNC-VB600L, SNC-VM600L, SNC-XM631L, SNC-WR602CL network cameras with firmware before Ver.2.7.2 are prone to sensitive information disclosure. This may allow an attacker on the same local network segment to login to the device with administrative privileges and perform operations on the device.

Credit: vultures@jpcert.or.jp

Affected SoftwareAffected VersionHow to fix
Sony Snc Series Firmware<=1.8.5.00
SONY SNC-CX600
Sony Snc-cx600w
Sony Snc-eb600
Sony Snc-eb600b
Sony Snc-eb602r
Sony Snc-eb630
Sony Snc-eb630b
Sony Snc-eb632r
Sony Snc-em600
Sony Snc-em601
Sony Snc-em602r
Sony Snc-em602rc
Sony Snc-em630
Sony Snc-em631
Sony Snc-em632r
Sony Snc-em632rc
Sony Snc-vb600
Sony Snc-vb600b
Sony Snc-vb600b5
Sony Snc-vb600l
Sony Snc-vb630
Sony Snc-vb6305
Sony Snc-vb6307
Sony Snc-vb632d
Sony Snc-vb635
Sony Snc-vm600
Sony Snc-vm600b
Sony Snc-vm600b5
Sony Snc-vm600l
Sony Snc-vm601
Sony Snc-vm601b
Sony Snc-vm602r
Sony Snc-vm630
Sony Snc-vm6305
Sony Snc-vm6307
Sony Snc-vm631
Sony Snc-vm632r
Sony Snc-wr600
Sony Snc-wr602
Sony Snc-wr602c
Sony Snc-wr602cl
Sony Snc-wr630
Sony Snc-wr632
Sony Snc-wr632c
Sony Snc-xm631
Sony Snc-xm631l
Sony Snc-xm632
Sony Snc-xm636
Sony Snc-xm637
Sony Snc Series Firmware<=2.7.0
SONY SNC-CH115
Sony Snc-ch120
Sony Snc-ch160
Sony Snc-ch220
Sony Snc-ch260
Sony Snc-dh120
Sony Snc-dh120t
Sony Snc-dh160
Sony Snc-dh220
Sony Snc-dh220t
Sony Snc-dh260
Sony Snc-eb520
Sony Snc-em520
Sony Snc-em521
Sony Snc-ep520
Sony Snc-ep521
Sony Snc-ep550
Sony Snc-ep580
Sony Snc-er520
Sony Snc-er521
Sony Snc-er521c
Sony Snc-er550
Sony Snc-er550c
Sony Snc-er580
Sony Snc-er585
Sony Snc-er585h
Sony Snc-zb550
Sony Snc-zm550
Sony Snc-zm551
Sony Snc-zp550
Sony Snc-zr550

Remedy

https://www.sony.co.uk/pro/article/sony-new-firmware-for-network-cameras

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203