CVE-2018-3937

An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00. A specially crafted GET request can cause arbitrary commands to be executed. An attacker can send an HTTP request to trigger this vulnerability.

• CWE-78

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0604Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0604Exploit, Third Party Advisory

Published

Aug 14, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-3931In Antenna House Office Server Document Converter version V6…7.8
• CVE-2018-3932An exploitable stack-based buffer overflow exists in the Mic…8.8
• CVE-2018-3933An exploitable out-of-bounds write exists in the Microsoft W…8.8
• CVE-2018-3934An exploitable code execution vulnerability exists in the fi…9.8
• CVE-2018-3935An exploitable code execution vulnerability exists in the UD…7.5
• CVE-2018-3936In Antenna House Office Server Document Converter version V6…8.8
• CVE-2018-3938An exploitable stack-based buffer overflow vulnerability exi…9.1
• CVE-2018-3939An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3940An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3941An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3942An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3943An exploitable use-after-free vulnerability exists in the Ja…8.8