Sony Snc-EM632RC Firmware vulnerabilities

2 CVEs affecting Sony Snc-EM632RC Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-3938, published 2018-08-14.

More from Sony.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-3937, published 2018-08-14. High severity, CVSS 7.2. EPSS: 9.6% chance of exploitation in the next 30 days. An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00. A specially crafted GET request can cause…
• CVE-2018-3938, published 2018-08-14. Critical severity, CVSS 10.0. EPSS: 3.3% chance of exploitation in the next 30 days. An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00. A specially crafted POST can cause a…