High severity · published Aug 14, 2018
CVE-2018-3937
An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00
7.2
CVSS
9.6%
EPSS
No
On KEV
Description
An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00. A specially crafted GET request can cause arbitrary commands to be executed. An attacker can send an HTTP request to trigger this vulnerability.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)9.6% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SO
Sony · Talos
Sony IPELA E series G5 firmware 1.87.00 · source: vendor
SF
Snc-eb600 Firmware · Sony
1.87.00 · source: NVD
SF
Snc-eb600b Firmware · Sony
1.87.00 · source: NVD
SF
Snc-eb602r Firmware · Sony
1.87.00 · source: NVD
SF
Snc-eb630 Firmware · Sony
1.87.00 · source: NVD
SF
Snc-eb630b Firmware · Sony
1.87.00 · source: NVD
SF
Snc-eb632r Firmware · Sony
1.87.00 · source: NVD
SF
Snc-em600 Firmware · Sony
1.87.00 · source: NVD
SF
Snc-em601 Firmware · Sony
1.87.00 · source: NVD
SF
Snc-em602r Firmware · Sony
1.87.00 · source: NVD
SF
Snc-em602rc Firmware · Sony
1.87.00 · source: NVD
SF
Snc-em630 Firmware · Sony
1.87.00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-3937
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-3937
Exploit
https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0604
More from Sony
10.0
CVE-2018-3938
An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00