Skip to content
OpenAdvisories
Critical · 9.1 CVE-2018-3938 EUVD-2018-15724GHSA-7qmf-37fc-vqcp

An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G…

Published Aug 14, 2018 · Updated Sep 16, 2024 · Assigned by talos

Description

An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00. A specially crafted POST can cause a stack-based buffer overflow, resulting in remote code execution. An attacker can send a malicious POST request to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Talos Sony Sony IPELA E series G5 firmware 1.87.00 —

References