CVE-2018-3937: OS Command Injection
First published: Tue Aug 14 2018(Updated: )
An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00. A specially crafted GET request can cause arbitrary commands to be executed. An attacker can send an HTTP request to trigger this vulnerability.
Credit: talos-cna@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sony Snc-eb600 Firmware | =1.87.00 | |
| Sony Snc-eb600 | ||
| Sony Snc-eb630 Firmware | =1.87.00 | |
| Sony Snc-eb630 | ||
| Sony Snc-eb600b Firmware | =1.87.00 | |
| Sony Snc-eb600b | ||
| Sony Snc-eb630b Firmware | =1.87.00 | |
| Sony Snc-eb630b | ||
| Sony Snc-eb602r Firmware | =1.87.00 | |
| Sony Snc-eb602r | ||
| Sony Snc-eb632r Firmware | =1.87.00 | |
| Sony Snc-eb632r | ||
| Sony Snc-em600 Firmware | =1.87.00 | |
| Sony Snc-em600 | ||
| Sony Snc-em601 Firmware | =1.87.00 | |
| Sony Snc-em601 | ||
| Sony Snc-em630 Firmware | =1.87.00 | |
| Sony Snc-em630 | ||
| Sony Snc-em631 Firmware | =1.87.00 | |
| Sony Snc-em631 | ||
| Sony Snc-em602r Firmware | =1.87.00 | |
| Sony Snc-em602r | ||
| Sony Snc-em632r Firmware | =1.87.00 | |
| Sony Snc-em632r | ||
| Sony Snc-em602rc Firmware | =1.87.00 | |
| Sony Snc-em602rc | ||
| Sony Snc-em632rc Firmware | =1.87.00 | |
| Sony Snc-em632rc |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2018-3937?
CVE-2018-3937 is a command injection vulnerability in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00.
How does CVE-2018-3937 impact Sony IPELA E Series Network Camera G5 firmware 1.87.00?
CVE-2018-3937 allows an attacker to execute arbitrary commands by sending a specially crafted GET request.
What is the severity of CVE-2018-3937?
CVE-2018-3937 has a severity rating of 7.2 (out of 10).
Which versions of Sony IPELA E Series Network Camera G5 firmware are affected by CVE-2018-3937?
Sony IPELA E Series Network Camera G5 firmware 1.87.00 is affected by CVE-2018-3937.
Is Sony Snc-eb600 vulnerable to CVE-2018-3937?
Yes, Sony Snc-eb600 with firmware version 1.87.00 is vulnerable to CVE-2018-3937.
- collector/nvd-index
- agent/weakness
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/author
- agent/severity
- agent/first-publish-date
- agent/description
- agent/event
- agent/tags
- vendor/sony
- canonical/sony snc-eb600 firmware
- version/sony snc-eb600 firmware/1.87.00
- canonical/sony snc-eb600
- canonical/sony snc-eb630 firmware
- version/sony snc-eb630 firmware/1.87.00
- canonical/sony snc-eb630
- canonical/sony snc-eb600b firmware
- version/sony snc-eb600b firmware/1.87.00
- canonical/sony snc-eb600b
- canonical/sony snc-eb630b firmware
- version/sony snc-eb630b firmware/1.87.00
- canonical/sony snc-eb630b
- canonical/sony snc-eb602r firmware
- version/sony snc-eb602r firmware/1.87.00
- canonical/sony snc-eb602r
- canonical/sony snc-eb632r firmware
- version/sony snc-eb632r firmware/1.87.00
- canonical/sony snc-eb632r
- canonical/sony snc-em600 firmware
- version/sony snc-em600 firmware/1.87.00
- canonical/sony snc-em600
- canonical/sony snc-em601 firmware
- version/sony snc-em601 firmware/1.87.00
- canonical/sony snc-em601
- canonical/sony snc-em630 firmware
- version/sony snc-em630 firmware/1.87.00
- canonical/sony snc-em630
- canonical/sony snc-em631 firmware
- version/sony snc-em631 firmware/1.87.00
- canonical/sony snc-em631
- canonical/sony snc-em602r firmware
- version/sony snc-em602r firmware/1.87.00
- canonical/sony snc-em602r
- canonical/sony snc-em632r firmware
- version/sony snc-em632r firmware/1.87.00
- canonical/sony snc-em632r
- canonical/sony snc-em602rc firmware
- version/sony snc-em602rc firmware/1.87.00
- canonical/sony snc-em602rc
- canonical/sony snc-em632rc firmware
- version/sony snc-em632rc firmware/1.87.00
- canonical/sony snc-em632rc