Lucene search

[email protected]CVE-2016-7834

HistoryApr 13, 2017 - 5:59 p.m.

CVE-2016-7834

2017-04-1317:59:00

CWE-200

[email protected]

web.nvd.nist.gov

sony

network cameras

firmware

information disclosure

cve-2016-7834

security vulnerability

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.2%

JSON

SONY SNC-CH115, SNC-CH120, SNC-CH160, SNC-CH220, SNC-CH260, SNC-DH120, SNC-DH120T, SNC-DH160, SNC-DH220, SNC-DH220T, SNC-DH260, SNC-EB520, SNC-EM520, SNC-EM521, SNC-ZB550, SNC-ZM550, SNC-ZM551, SNC-EP550, SNC-EP580, SNC-ER550, SNC-ER550C, SNC-ER580, SNC-ER585, SNC-ER585H, SNC-ZP550, SNC-ZR550, SNC-EP520, SNC-EP521, SNC-ER520, SNC-ER521, SNC-ER521C network cameras with firmware before Ver.1.86.00 and SONY SNC-CX600, SNC-CX600W, SNC-EB600, SNC-EB600B, SNC-EB602R, SNC-EB630, SNC-EB630B, SNC-EB632R, SNC-EM600, SNC-EM601, SNC-EM602R, SNC-EM602RC, SNC-EM630, SNC-EM631, SNC-EM632R, SNC-EM632RC, SNC-VB600, SNC-VB600B, SNC-VB600B5, SNC-VB630, SNC-VB6305, SNC-VB6307, SNC-VB632D, SNC-VB635, SNC-VM600, SNC-VM600B, SNC-VM600B5, SNC-VM601, SNC-VM601B, SNC-VM602R, SNC-VM630, SNC-VM6305, SNC-VM6307, SNC-VM631, SNC-VM632R, SNC-WR600, SNC-WR602, SNC-WR602C, SNC-WR630, SNC-WR632, SNC-WR632C, SNC-XM631, SNC-XM632, SNC-XM636, SNC-XM637, SNC-VB600L, SNC-VM600L, SNC-XM631L, SNC-WR602CL network cameras with firmware before Ver.2.7.2 are prone to sensitive information disclosure. This may allow an attacker on the same local network segment to login to the device with administrative privileges and perform operations on the device.

Affected configurations

NVD

Node

sonysnc_series_firmwareRange≤1.8.5.00

AND

sonysnc-cx600Match-

sonysnc-cx600wMatch-

sonysnc-eb600Match-

sonysnc-eb600bMatch-

sonysnc-eb602rMatch-

sonysnc-eb630Match-

sonysnc-eb630bMatch-

sonysnc-eb632rMatch-

sonysnc-em600Match-

sonysnc-em601Match-

sonysnc-em602rMatch-

sonysnc-em602rcMatch-

sonysnc-em630Match-

sonysnc-em631Match-

sonysnc-em632rMatch-

sonysnc-em632rcMatch-

sonysnc-vb600Match-

sonysnc-vb600bMatch-

sonysnc-vb600b5Match-

sonysnc-vb600lMatch-

sonysnc-vb630Match-

sonysnc-vb6305Match-

sonysnc-vb6307Match-

sonysnc-vb632dMatch-

sonysnc-vb635Match-

sonysnc-vm600Match-

sonysnc-vm600bMatch-

sonysnc-vm600b5Match-

sonysnc-vm600lMatch-

sonysnc-vm601Match-

sonysnc-vm601bMatch-

sonysnc-vm602rMatch-

sonysnc-vm630Match-

sonysnc-vm6305Match-

sonysnc-vm6307Match-

sonysnc-vm631Match-

sonysnc-vm632rMatch-

sonysnc-wr600Match-

sonysnc-wr602Match-

sonysnc-wr602cMatch-

sonysnc-wr602clMatch-

sonysnc-wr630Match-

sonysnc-wr632Match-

sonysnc-wr632cMatch-

sonysnc-xm631Match-

sonysnc-xm631lMatch-

sonysnc-xm632Match-

sonysnc-xm636Match-

sonysnc-xm637Match-

Node

sonysnc_series_firmwareRange≤2.7.0

AND

sonysnc-ch115Match-

sonysnc-ch120Match-

sonysnc-ch160Match-

sonysnc-ch220Match-

sonysnc-ch260Match-

sonysnc-dh120Match-

sonysnc-dh120tMatch-

sonysnc-dh160Match-

sonysnc-dh220Match-

sonysnc-dh220tMatch-

sonysnc-dh260Match-

sonysnc-eb520Match-

sonysnc-em520Match-

sonysnc-em521Match-

sonysnc-ep520Match-

sonysnc-ep521Match-

sonysnc-ep550Match-

sonysnc-ep580Match-

sonysnc-er520Match-

sonysnc-er521Match-

sonysnc-er521cMatch-

sonysnc-er550Match-

sonysnc-er550cMatch-

sonysnc-er580Match-

sonysnc-er585Match-

sonysnc-er585hMatch-

sonysnc-zb550Match-

sonysnc-zm550Match-

sonysnc-zm551Match-

sonysnc-zp550Match-

sonysnc-zr550Match-

CPENameOperatorVersion
sony:snc_series_firmwaresony snc series firmwarele1.8.5.00

CPE	Name	Operator	Version
sony:snc_series_firmware	sony snc series firmware	le	1.8.5.00

References

jvn.jp/en/vu/JVNVU96435227/index.html

www.sony.co.uk/pro/article/sony-new-firmware-for-network-cameras

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.2%

JSON

Related for CVE-2016-7834

nvd1 nuclei1 cvelist1 prion1