CVE-2020-36885

Critical

Description

Sony IPELA Network Camera 1.82.01 contains a stack buffer overflow vulnerability in the ftpclient.cgi endpoint that allows remote attackers to execute arbitrary code. Attackers can exploit the vulnerability by sending a crafted POST request with oversized data to the FTP client functionality, potentially causing remote code execution or denial of service.

SeverityCritical

CVSS9.8

Exploit probability—

ProductSony Snc-dh120t Firmware

PublishedDec 10, 2025

First seenDec 10, 2025

Weakness typeCWE-787Out-of-bounds write

How to fix

Patches

pro.sony/en_NL/support-resources/snc-dh120/software/mpengb00000928

Vendor advisories

zeroscience.mk/en/vulnerabilities/ZSL-2020-5596.php

Affected products

Product	Affected versions	Fixed in
sony snc-dh120t_firmware	v ≤ 1.82.01	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.