CVE-2018-3937

Name of the Vulnerable Software and Affected Versions Sony IPELA E Series Network Camera G5 firmware 1.87.00

Description A command injection issue exists in the measurementBitrateExec functionality, allowing arbitrary commands to be executed with a specially crafted GET request. This can be triggered by sending an HTTP request.

Recommendations For firmware 1.87.00, consider restricting access to the measurementBitrateExec functionality until a patch is available. Avoid using the vulnerable functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.