CVE-2018-3937: Sony Snc-EB600 Firmware

High severity, CVSS 7.2. EPSS: 9.6% chance of exploitation in the next 30 days.

An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00. A specially crafted GET request can cause arbitrary commands to be executed. An attacker can send an HTTP request to trigger this vulnerability.

Affected products

• Sony Snc-EB600 Firmware: version 1.87.00 only
• Sony Snc-EB600B Firmware: version 1.87.00 only
• Sony Snc-EB602R Firmware: version 1.87.00 only
• Sony Snc-EB630 Firmware: version 1.87.00 only
• Sony Snc-EB630B Firmware: version 1.87.00 only
• Sony Snc-EB632R Firmware: version 1.87.00 only
• Sony Snc-EM600 Firmware: version 1.87.00 only
• Sony Snc-EM601 Firmware: version 1.87.00 only
• Sony Snc-EM602R Firmware: version 1.87.00 only
• Sony Snc-EM602RC Firmware: version 1.87.00 only
• Sony Snc-EM630 Firmware: version 1.87.00 only
• Sony Snc-EM631 Firmware: version 1.87.00 only
• Sony Snc-EM632R Firmware: version 1.87.00 only
• Sony Snc-EM632RC Firmware: version 1.87.00 only

Published 2018-08-14. Last modified 2026-06-17.