Description
Sony IPELA Network Camera 1.82.01 contains a stack buffer overflow vulnerability in the ftpclient.cgi endpoint that allows remote attackers to execute arbitrary code. Attackers can exploit the vulnerability by sending a crafted POST request with oversized data to the FTP client functionality, potentially causing remote code execution or denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sony Electronics | IPELA Network Camera | ≤ 1.82.01 | — |
References
- ExploitDB-48842 exploit
- Fixed in 1.88.0.0 patch
- Zero Science Lab Disclosure vendor-advisory
- Product web page product
- VulnCheck Advisory: Sony IPELA Network Camera 1.82.01 Remote Stack Buffer Overflow via ftpclient.cgi third-party-advisory