Description
Sony IPELA Network Camera 1.82.01 contains a stack buffer overflow vulnerability in the ftpclient.cgi endpoint that allows remote attackers to execute arbitrary code. Attackers can exploit the vulnerability by sending a crafted POST request with oversized data to the FTP client functionality, potentially causing remote code execution or denial of service.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Sony Electronics Inc. IPELA Network Camera
Default version status: unaffected
0 to ≤ 1.82.01affected
References
- https://www.exploit-db.com/exploits/48842 ↗
- https://pro.sony/en_NL/support-resources/snc-dh120/software/mpengb00000928 ↗
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5596.php ↗
- https://pro.sony/en_NL/support-resources/snc-dh120/ ↗
- https://www.vulncheck.com/advisories/sony-ipela-network-camera-remote-stack-buffer-overflow-via-ftpclientcgi ↗