ID
VAR-201612-0630
TITLE
Multiple Sony IPELA Engine IP Cameras Remote Code Execution Vulnerabilities
Trust: 0.6
DESCRIPTION
IPELAEngineIPCameras is an IP camera product from Sony Corporation. There is an unknown remote code execution vulnerability in IPELAEngineIPCameras. An attacker could exploit the vulnerability to execute arbitrary code, and a failed attack attempt could trigger a denial of service condition. Multiple Sony IPELA Engine IP Cameras are prone to unspecified remote code-execution vulnerability. Failed exploit attempts may result in a denial-of-service condition
Trust: 0.81
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | sony | model: | ipela engine ip cameras | scope: | - | version: | - | Trust: 0.6 |
| vendor: | sony | model: | ipela engine ip camera | scope: | eq | version: | 0 | Trust: 0.3 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||
|
|
THREAT TYPE
network
Trust: 0.3
TYPE
Input Validation Error
Trust: 0.3
EXTERNAL IDS
| db: | BID | id: | 94840 | Trust: 0.9 |
| db: | CNVD | id: | CNVD-2016-12612 | Trust: 0.6 |
REFERENCES
| url: | http://www.securityfocus.com/bid/94840 | Trust: 0.6 |
| url: | www.sony.com | Trust: 0.3 |
| url: | http://blog.sec-consult.com/2016/12/backdoor-in-sony-ipela-engine-ip-cameras.html | Trust: 0.3 |
CREDITS
SEC Consult
Trust: 0.3
SOURCES
| db: | CNVD | id: | CNVD-2016-12612 |
| db: | BID | id: | 94840 |
LAST UPDATE DATE
2022-05-17T01:43:18.015000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2016-12612 | date: | 2016-12-20T00:00:00 |
| db: | BID | id: | 94840 | date: | 2016-12-20T01:08:00 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2016-12612 | date: | 2016-12-20T00:00:00 |
| db: | BID | id: | 94840 | date: | 2016-12-12T00:00:00 |