CNNVD-202512-1819 Information

CNNVD ID

CNNVD-202512-1819

CVE-2020-36885

  • CNNVD Published: 2025-12-10

Description (Chinese)

Sony IPELA Network Camera是日本索尼(Sony)公司的一个网络摄像头。 Sony IPELA Network Camera 1.82.01版本存在缓冲区错误漏洞,该漏洞源于ftpclient.cgi端点存在栈缓冲区溢出,可能导致远程代码执行。

Description (English)

Sony IPELA Network Camera is a webcam of Sony. Version 1.82.01 of Sony IPELA Network Camera contains an error loophole in the buffer zone, which stems from the spilling of a stpclient.cgi endpoint, which may lead to remote code implementation.

Hazard Level

High

Vulnerability Type

缓冲区错误

Affected Vendor

索尼

Published

2025-12-10

Last Modified

2026-02-24

References

https://pro.sony/en_NL/support-resources/snc-dh120/ https://pro.sony/en_NL/support-resources/snc-dh120/software/mpengb00000928 https://www.exploit-db.com/exploits/48842 https://www.vulncheck.com/advisories/sony-ipela-network-camera-remote-stack-buffer-overflow-via-ftpclientcgi https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5596.php

Patch

https://www.sony.nl/electronics/support/software/mpengb00000928

Share on: