What’s Vulnerable › Vulnerabilities

CVE-2018-3937

• Severity: high (CVSS 7.2 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 9.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-08-14 · updated 2026-06-17
• Weakness: CWE-78

Description

An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00. A specially crafted GET request can cause arbitrary commands to be executed. An attacker can send an HTTP request to trigger this vulnerability.

Affected products

• Sony Snc-Eb600 Firmware: 1.87.00
• Sony Snc-Eb600B Firmware: 1.87.00
• Sony Snc-Eb602R Firmware: 1.87.00
• Sony Snc-Eb630 Firmware: 1.87.00
• Sony Snc-Eb630B Firmware: 1.87.00
• Sony Snc-Eb632R Firmware: 1.87.00
• Sony Snc-Em600 Firmware: 1.87.00
• Sony Snc-Em601 Firmware: 1.87.00
• Sony Snc-Em602R Firmware: 1.87.00
• Sony Snc-Em602Rc Firmware: 1.87.00
• Sony Snc-Em630 Firmware: 1.87.00
• Sony Snc-Em631 Firmware: 1.87.00
• Sony Snc-Em632R Firmware: 1.87.00
• Sony Snc-Em632Rc Firmware: 1.87.00

References

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0604
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0604

Get alerted when CVE-2018-3937 or the next vulnerability affects your stack