CVE:CVE-2018-3938
CNNVD:CNNVD-201808-417
Sony IPELA E Series Camera G5是日本索尼（Sony）公司的一款网络摄像机产品。
使用1.87.00版本固件的Sony IPELA E Series Camera G5中的802dot1xclientcert.cgi文件存在基于栈的缓冲区溢出漏洞。远程攻击者可通过发送恶意的POST请求利用该漏洞执行代码。
solution:Upgrade sony snc-eb600_firmware to a higher version than 1.87.00,and avoid the version 1.87.00; Upgrade sony snc-eb630_firmware to a higher version than 1.87.00,and avoid the version 1.87.00; Upgrade sony snc-eb600b_firmware to a higher version than 1.87.00,and avoid the version 1.87.00; Upgrade sony snc-eb630b_firmware to a higher version than 1.87.00,and avoid the version 1.87.00; Upgrade sony snc-eb602r_firmware to a higher version than 1.87.00,and avoid the version 1.87.00; Upgrade sony snc-eb632r_firmware to a higher version than 1.87.00,and avoid the version 1.87.00; Upgrade sony snc-em600_firmware to a higher version than 1.87.00,and avoid the version 1.87.00; Upgrade sony snc-em601_firmware to a higher version than 1.87.00,and avoid the version 1.87.00; Upgrade sony snc-em630_firmware to a higher version than 1.87.00,and avoid the version 1.87.00; Upgrade sony snc-em631_firmware to a higher version than 1.87.00,and avoid the version 1.87.00; Upgrade sony snc-em602r_firmware to a higher version than 1.87.00,and avoid the version 1.87.00; Upgrade sony snc-em632r_firmware to a higher version than 1.87.00,and avoid the version 1.87.00; Upgrade sony snc-em602rc_firmware to a higher version than 1.87.00,and avoid the version 1.87.00; Upgrade sony snc-em632rc_firmware to a higher version than 1.87.00,and avoid the version 1.87.00