Vulnerability · Published Dec 10, 2025 · Assigned by VulnCheck

CVE-2020-36885Sony IPELA Network Camera 1.82.01 Remote Stack Buffer Overflow via ftpclient.cgi

Critical 9.3

In plain English

A critical-severity out-of-bounds write in IPELA Network Camera from Sony Electronics Inc.. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 69% of all known vulnerabilities).

Severity (CVSS 4.0)9.3Critical

Exploit odds (30 days)1.2%top 31.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Sony IPELA Network Camera 1.82.01 contains a stack buffer overflow vulnerability in the ftpclient.cgi endpoint that allows remote attackers to execute arbitrary code. Attackers can exploit the vulnerability by sending a crafted POST request with oversized data to the FTP client functionality, potentially causing remote code execution or denial of service.

Affected products (as reported)

Vendor	Product	Versions
Sony Electronics Inc.	IPELA Network Camera	0 – through 1.82.01

Weakness: CWE-787 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

ExploitDB-48842 exploit
Fixed in 1.88.0.0 patch
Zero Science Lab Disclosure vendor-advisory
Product web page product
VulnCheck Advisory: Sony IPELA Network Camera 1.82.01 Remote Stack Buffer Overflow via ftpclient.cgi third-party-advisory