CVE-2020-36885CWE-787

Sony IPELA Network Camera 1.82.01 Remote Stack Buffer Overflow via ftpclient.cgi

Critical · published December 10, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
68.7
In the wild
Unconfirmed
What it is

🚨 A stack buffer overflow is lurking in Sony's IPELA Network Camera 1.82.01! Just a single oversized POST request could let attackers execute any code they please. 🔥 Think of it as a delivery driver who accidentally opens all the packages at your doorstep instead of just the ones addressed to you. This flaw lets attackers commandeer the camera's functionality without breaking a sweat! If exploited, an attacker could gain remote control over the camera, causing chaos and potentially turning it into a launching pad for further attacks. Imagine your security camera suddenly becoming a security risk—yikes!

Put simply

Think of it as a delivery driver who accidentally opens all the packages at your doorstep instead of just the ones addressed to you. This flaw lets attackers commandeer the camera's functionality without breaking a sweat! This vulnerability, found in the ftpclient.cgi endpoint, allows remote attackers to execute arbitrary code by sending oversized data via a crafted POST request. This bypasses normal safeguards, leading to possible remote code execution or denial of service.

What to do

If exploited, an attacker could gain remote control over the camera, causing chaos and potentially turning it into a launching pad for further attacks. Imagine your security camera suddenly becoming a security risk—yikes! It’s crucial to patch this vulnerability immediately! Update your IPELA Network Camera to the latest version to close this security gap, and review your network policies to restrict incoming traffic to trusted sources. 🛡️ You’ve got this! Secure your camera and keep that digital world safe! 😄

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.01229 · 68.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-12-10T20:48Z
EPSS history
Timeline
  • 10 DEC 20:48Z
    Sony IPELA Network Camera 1.82.01 Remote Stack Buffer Overflow via ftpclient.cgi
    cvelistv5