What’s Vulnerable › Vulnerabilities

CVE-2018-3938

• Severity: critical (CVSS 10.0 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-08-14 · updated 2026-06-17
• Weakness: CWE-787

Description

An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00. A specially crafted POST can cause a stack-based buffer overflow, resulting in remote code execution. An attacker can send a malicious POST request to trigger this vulnerability.

Affected products

• Sony Snc-Eb600 Firmware: 1.87.00
• Sony Snc-Eb600B Firmware: 1.87.00
• Sony Snc-Eb602R Firmware: 1.87.00
• Sony Snc-Eb630 Firmware: 1.87.00
• Sony Snc-Eb630B Firmware: 1.87.00
• Sony Snc-Eb632R Firmware: 1.87.00
• Sony Snc-Em600 Firmware: 1.87.00
• Sony Snc-Em601 Firmware: 1.87.00
• Sony Snc-Em602R Firmware: 1.87.00
• Sony Snc-Em602Rc Firmware: 1.87.00
• Sony Snc-Em630 Firmware: 1.87.00
• Sony Snc-Em631 Firmware: 1.87.00
• Sony Snc-Em632R Firmware: 1.87.00
• Sony Snc-Em632Rc Firmware: 1.87.00

References

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0605
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0605

Get alerted when CVE-2018-3938 or the next vulnerability affects your stack