Command injection

2018-08-1419:29:00

PRIOn knowledge base

www.prio-n.com

0.006 Low

EPSS

Percentile

77.7%

JSON

An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00. A specially crafted GET request can cause arbitrary commands to be executed. An attacker can send an HTTP request to trigger this vulnerability.

CPENameOperatorVersion
snc-eb600_firmwareeq1.87.00
snc-eb600b_firmwareeq1.87.00
snc-eb602r_firmwareeq1.87.00
snc-eb630_firmwareeq1.87.00
snc-eb630b_firmwareeq1.87.00
snc-eb632r_firmwareeq1.87.00
snc-em600_firmwareeq1.87.00
snc-em601_firmwareeq1.87.00
snc-em602r_firmwareeq1.87.00
snc-em602rc_firmwareeq1.87.00

Name	Operator	Version
snc-eb600_firmware	eq	1.87.00
snc-eb600b_firmware	eq	1.87.00
snc-eb602r_firmware	eq	1.87.00
snc-eb630_firmware	eq	1.87.00
snc-eb630b_firmware	eq	1.87.00
snc-eb632r_firmware	eq	1.87.00
snc-em600_firmware	eq	1.87.00
snc-em601_firmware	eq	1.87.00
snc-em602r_firmware	eq	1.87.00
snc-em602rc_firmware	eq	1.87.00