Vulnerability Description
SONY SNC-CH115, SNC-CH120, SNC-CH160, SNC-CH220, SNC-CH260, SNC-DH120, SNC-DH120T, SNC-DH160, SNC-DH220, SNC-DH220T, SNC-DH260, SNC-EB520, SNC-EM520, SNC-EM521, SNC-ZB550, SNC-ZM550, SNC-ZM551, SNC-EP550, SNC-EP580, SNC-ER550, SNC-ER550C, SNC-ER580, SNC-ER585, SNC-ER585H, SNC-ZP550, SNC-ZR550, SNC-EP520, SNC-EP521, SNC-ER520, SNC-ER521, SNC-ER521C network cameras with firmware before Ver.1.86.00 and SONY SNC-CX600, SNC-CX600W, SNC-EB600, SNC-EB600B, SNC-EB602R, SNC-EB630, SNC-EB630B, SNC-EB632R, SNC-EM600, SNC-EM601, SNC-EM602R, SNC-EM602RC, SNC-EM630, SNC-EM631, SNC-EM632R, SNC-EM632RC, SNC-VB600, SNC-VB600B, SNC-VB600B5, SNC-VB630, SNC-VB6305, SNC-VB6307, SNC-VB632D, SNC-VB635, SNC-VM600, SNC-VM600B, SNC-VM600B5, SNC-VM601, SNC-VM601B, SNC-VM602R, SNC-VM630, SNC-VM6305, SNC-VM6307, SNC-VM631, SNC-VM632R, SNC-WR600, SNC-WR602, SNC-WR602C, SNC-WR630, SNC-WR632, SNC-WR632C, SNC-XM631, SNC-XM632, SNC-XM636, SNC-XM637, SNC-VB600L, SNC-VM600L, SNC-XM631L, SNC-WR602CL network cameras with firmware before Ver.2.7.2 are prone to sensitive information disclosure. This may allow an attacker on the same local network segment to login to the device with administrative privileges and perform operations on the device.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sony | Snc Series Firmware | <= 1.8.5.00 |
| Sony | Snc-Cx600 | - |
| Sony | Snc-Cx600W | - |
| Sony | Snc-Eb600 | - |
| Sony | Snc-Eb600B | - |
| Sony | Snc-Eb602R | - |
| Sony | Snc-Eb630 | - |
| Sony | Snc-Eb630B | - |
| Sony | Snc-Eb632R | - |
| Sony | Snc-Em600 | - |
| Sony | Snc-Em601 | - |
| Sony | Snc-Em602R | - |
| Sony | Snc-Em602Rc | - |
| Sony | Snc-Em630 | - |
| Sony | Snc-Em631 | - |
| Sony | Snc-Em632R | - |
| Sony | Snc-Em632Rc | - |
| Sony | Snc-Vb600 | - |
| Sony | Snc-Vb600B | - |
| Sony | Snc-Vb600B5 | - |
Related Weaknesses (CWE)
References
- https://jvn.jp/en/vu/JVNVU96435227/index.htmlThird Party AdvisoryVDB Entry
- https://www.sony.co.uk/pro/article/sony-new-firmware-for-network-camerasPatchVendor Advisory
- https://jvn.jp/en/vu/JVNVU96435227/index.htmlThird Party AdvisoryVDB Entry
- https://www.sony.co.uk/pro/article/sony-new-firmware-for-network-camerasPatchVendor Advisory
FAQ
What is CVE-2016-7834?
CVE-2016-7834 is a vulnerability with a CVSS score of 8.8 (HIGH). SONY SNC-CH115, SNC-CH120, SNC-CH160, SNC-CH220, SNC-CH260, SNC-DH120, SNC-DH120T, SNC-DH160, SNC-DH220, SNC-DH220T, SNC-DH260, SNC-EB520, SNC-EM520, SNC-EM521, SNC-ZB550, SNC-ZM550, SNC-ZM551, SNC-EP...
How severe is CVE-2016-7834?
CVE-2016-7834 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-7834?
Check the references section above for vendor advisories and patch information. Affected products include: Sony Snc Series Firmware, Sony Snc-Cx600, Sony Snc-Cx600W, Sony Snc-Eb600, Sony Snc-Eb600B.