CVE-2018-7781

HIGH

Schneider Electric Pelco Sarix Professional 1st Gen < 3.29.69 - Authenticated Sensitive Data Exposure

Title source: llm
STIX 2.1

Description

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear text and results in privilege escalation.

References (1)

Core 1
Core References

Scores

CVSS v3 8.8
EPSS 0.0059
EPSS Percentile 43.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-311
Status published
Products (20)
schneider-electric/ibp1110-1er_firmware < 3.29.69
schneider-electric/ibp219-1er_firmware < 3.29.69
schneider-electric/ibp319-1er_firmware < 3.29.69
schneider-electric/ibp519-1er_firmware < 3.29.69
schneider-electric/ibps110-1er_firmware < 3.29.69
schneider-electric/imp1110-1_firmware < 3.29.69
schneider-electric/imp1110-1e_firmware < 3.29.69
schneider-electric/imp1110-1er_firmware < 3.29.69
schneider-electric/imp219-1_firmware < 3.29.69
schneider-electric/imp219-1e_firmware < 3.29.69
... and 10 more
Published Jul 03, 2018
Tracked Since Feb 18, 2026