Quantum Secular Labs / Blog / Advisories
CVE-2018-3938: An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality…
CVE-2018-3938 is rated critical with a CVSS v3.0 base score of 10.0 and NVD lists 14 affected products, including Sony Snc Eb600 Firmware. Per its scoring, it can be exploited over the network, without authentication, without any user interaction. The scored impact on confidentiality, integrity and availability is the highest available.
Vulnerability description
An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00. A specially crafted POST can cause a stack-based buffer overflow, resulting in remote code execution. An attacker can send a malicious POST request to trigger this vulnerability.
Severity breakdown
CVSS v3.0 10.0: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- Attack vector: Network. Exploitable remotely over the network, with no need for local or physical access.
- Attack complexity: Low. No special conditions; the attack can be repeated reliably.
- Privileges required: None. No account or prior access is needed.
- User interaction: None. No action from any user is needed.
- Scope: Changed. Impact reaches beyond the vulnerable component to other resources.
- Confidentiality impact: High. Total loss of confidentiality; sensitive data can be fully disclosed.
- Integrity impact: High. Total loss of integrity; data or system state can be fully modified.
- Availability impact: High. Total loss of availability; the component can be shut down.
Underlying weakness
CWE-787: Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Affected products
- Sony Snc Eb600 Firmware: 1.87.00
- Sony Snc Eb630 Firmware: 1.87.00
- Sony Snc Eb600b Firmware: 1.87.00
- Sony Snc Eb630b Firmware: 1.87.00
- Sony Snc Eb602r Firmware: 1.87.00
- Sony Snc Eb632r Firmware: 1.87.00
- Sony Snc Em600 Firmware: 1.87.00
- Sony Snc Em601 Firmware: 1.87.00
- Sony Snc Em630 Firmware: 1.87.00
- Sony Snc Em631 Firmware: 1.87.00
- Sony Snc Em602r Firmware: 1.87.00
- Sony Snc Em632r Firmware: 1.87.00
- Sony Snc Em602rc Firmware: 1.87.00
- Sony Snc Em632rc Firmware: 1.87.00