ID

VAR-E-201612-0378


TITLE

Multiple Sony IPELA Engine IP Cameras Unspecified Remote Code Execution Vulnerability

Trust: 0.3

sources: BID: 94840

DESCRIPTION

Multiple Sony IPELA Engine IP Cameras are prone to unspecified remote code-execution vulnerability.
An attacker can exploit this issue to execute arbitrary code. Failed exploit attempts may result in a denial-of-service condition.

Trust: 0.3

sources: BID: 94840

AFFECTED PRODUCTS

vendor:sonymodel:ipela engine ip camerascope:eqversion:0

Trust: 0.3

sources: BID: 94840

EXPLOIT

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

Trust: 0.3

sources: BID: 94840

PRICE

Free

Trust: 0.3

sources: BID: 94840

TYPE

Input Validation Error

Trust: 0.3

sources: BID: 94840

CREDITS

SEC Consult

Trust: 0.3

sources: BID: 94840

EXTERNAL IDS

db:BIDid:94840

Trust: 0.3

sources: BID: 94840

REFERENCES

url:http://blog.sec-consult.com/2016/12/backdoor-in-sony-ipela-engine-ip-cameras.html

Trust: 0.3

sources: BID: 94840

SOURCES

db:BIDid:94840

LAST UPDATE DATE

2022-07-27T09:27:10.124000+00:00


SOURCES UPDATE DATE

db:BIDid:94840date:2016-12-20T01:08:00

SOURCES RELEASE DATE

db:BIDid:94840date:2016-12-12T00:00:00