CVE-2020-36885

Sony IPELA Network Camera 1.82.01 contains a stack buffer overflow vulnerability in the ftpclient.cgi endpoint that allows remote attackers to execute arbitrary code. Attackers can exploit the vulnerability by sending a crafted POST request with oversized data to the FTP client functionality, potentially causing remote code execution or denial of service.

• CWE-787

• https://pro.sony/en_NL/support-resources/snc-dh120/Broken Link
• https://pro.sony/en_NL/support-resources/snc-dh120/software/mpengb00000928Release Notes
• https://www.exploit-db.com/exploits/48842Exploit, Third Party Advisory
• https://www.vulncheck.com/advisories/sony-ipela-network-camera-remote-stack-buffer-overflow-via-ftpclientcgiThird Party Advisory
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5596.phpThird Party Advisory
• https://www.exploit-db.com/exploits/48842Exploit, Third Party Advisory
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5596.phpThird Party Advisory

Published

Dec 10, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3688Possible buffer overflow while parsing mp4 clip with corrupt…9.8
• CVE-2020-36880Flexsense DiskBoss 7.7.14 contains a local buffer overflow v…7.8
• CVE-2020-36881Flexsense DiskBoss 7.7.14 contains a local buffer overflow v…7.8
• CVE-2020-36882Flexsense DiskBoss 7.7.14 allows unauthenticated attackers t…7.5
• CVE-2020-36883SpinetiX Fusion Digital Signage 3.4.8 and lower contains an …8.1
• CVE-2020-36884BrightSign Digital Signage Diagnostic Web Server 8.2.26 and …6.9
• CVE-2020-36886SpinetiX Fusion Digital Signage 3.4.8 contains a cross-site …8.8
• CVE-2020-36887SpinetiX Fusion Digital Signage 3.4.8 contains an unauthenti…7.5
• CVE-2020-36888SpinetiX Fusion Digital Signage 3.4.8 contains a username en…5.3
• CVE-2020-36889A stored cross-site scripting vulnerability in Kentico Xperi…5.4
• CVE-2020-36890An access control bypass vulnerability in Kentico Xperience …8.6
• CVE-2020-36891A stored cross-site scripting vulnerability in Kentico Xperi…5.4