BaseFortify

Publication date: 2025-12-10

Last updated on: 2025-12-11

Assigner: VulnCheck

Description

Sony IPELA Network Camera 1.82.01 contains a stack buffer overflow vulnerability in the ftpclient.cgi endpoint that allows remote attackers to execute arbitrary code. Attackers can exploit the vulnerability by sending a crafted POST request with oversized data to the FTP client functionality, potentially causing remote code execution or denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-10

Last Modified

2025-12-11

Generated

2026-07-06

AI Q&A

2025-12-10

EPSS Evaluated

2026-07-05

NVD

CVE-2020-36885

Affected Vendors & Products

Vendor	Product	Version / Range
sony	ipela_network_camera	1.82.01

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a stack buffer overflow in the ftpclient.cgi endpoint of Sony IPELA Network Camera version 1.82.01. It allows remote attackers to send a crafted POST request with oversized data to the FTP client functionality, which can lead to execution of arbitrary code on the device.

Impact Analysis

Exploitation of this vulnerability can allow remote attackers to execute arbitrary code on the affected device or cause a denial of service, potentially compromising the security and availability of the network camera.

Hi! I’m here to help you understand CVE-2020-36885. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70