CVE-2018-3938: Sony Snc-EB600 Firmware

Critical severity, CVSS 10.0. EPSS: 3.3% chance of exploitation in the next 30 days.

An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00. A specially crafted POST can cause a stack-based buffer overflow, resulting in remote code execution. An attacker can send a malicious POST request to trigger this vulnerability.

Affected products

• Sony Snc-EB600 Firmware: version 1.87.00 only
• Sony Snc-EB600B Firmware: version 1.87.00 only
• Sony Snc-EB602R Firmware: version 1.87.00 only
• Sony Snc-EB630 Firmware: version 1.87.00 only
• Sony Snc-EB630B Firmware: version 1.87.00 only
• Sony Snc-EB632R Firmware: version 1.87.00 only
• Sony Snc-EM600 Firmware: version 1.87.00 only
• Sony Snc-EM601 Firmware: version 1.87.00 only
• Sony Snc-EM602R Firmware: version 1.87.00 only
• Sony Snc-EM602RC Firmware: version 1.87.00 only
• Sony Snc-EM630 Firmware: version 1.87.00 only
• Sony Snc-EM631 Firmware: version 1.87.00 only
• Sony Snc-EM632R Firmware: version 1.87.00 only
• Sony Snc-EM632RC Firmware: version 1.87.00 only

Published 2018-08-14. Last modified 2026-06-17.