critical
10
CWE
787 119
Advisory Published
Updated

CVE-2018-3938: Buffer Overflow

First published: Tue Aug 14 2018(Updated: )

An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00. A specially crafted POST can cause a stack-based buffer overflow, resulting in remote code execution. An attacker can send a malicious POST request to trigger this vulnerability.

Credit: talos-cna@cisco.com

Affected SoftwareAffected VersionHow to fix
Sony Snc-eb600 Firmware=1.87.00
Sony Snc-eb600
Sony Snc-eb630 Firmware=1.87.00
Sony Snc-eb630
Sony Snc-eb600b Firmware=1.87.00
Sony Snc-eb600b
Sony Snc-eb630b Firmware=1.87.00
Sony Snc-eb630b
Sony Snc-eb602r Firmware=1.87.00
Sony Snc-eb602r
Sony Snc-eb632r Firmware=1.87.00
Sony Snc-eb632r
Sony Snc-em600 Firmware=1.87.00
Sony Snc-em600
Sony Snc-em601 Firmware=1.87.00
Sony Snc-em601
Sony Snc-em630 Firmware=1.87.00
Sony Snc-em630
Sony Snc-em631 Firmware=1.87.00
Sony Snc-em631
Sony Snc-em602r Firmware=1.87.00
Sony Snc-em602r
Sony Snc-em632r Firmware=1.87.00
Sony Snc-em632r
Sony Snc-em602rc Firmware=1.87.00
Sony Snc-em602rc
Sony Snc-em632rc Firmware=1.87.00
Sony Snc-em632rc

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is CVE-2018-3938?

    CVE-2018-3938 is a stack-based buffer overflow vulnerability in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00.

  • How does CVE-2018-3938 affect Sony cameras?

    CVE-2018-3938 affects Sony IPELA E Series Camera G5 firmware version 1.87.00.

  • What is the severity of CVE-2018-3938?

    CVE-2018-3938 has a severity rating of critical.

  • How can CVE-2018-3938 be exploited?

    CVE-2018-3938 can be exploited by sending a specially crafted POST request, causing a stack-based buffer overflow and resulting in remote code execution.

  • Is there a fix for CVE-2018-3938?

    Yes, to fix CVE-2018-3938, users should update their Sony IPELA E Series Camera G5 firmware to version 1.87.01 or later.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203