NetSight
high8.8

CVE-2018-7781

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authen…

Impact

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear text and results in privilege escalation.

Affected products

VendorProductAffected versions
Schneider-ElectricImps110-1 Firmware
before 3.29.69
Schneider-ElectricImps110-1e Firmware
before 3.29.69
Schneider-ElectricImps110-1er Firmware
before 3.29.69
Schneider-ElectricIbps110-1er Firmware
before 3.29.69
Schneider-ElectricImp1110-1 Firmware
before 3.29.69
Schneider-ElectricImp1110-1e Firmware
before 3.29.69
Schneider-ElectricImp1110-1er Firmware
before 3.29.69
Schneider-ElectricIbp1110-1er Firmware
before 3.29.69
Schneider-ElectricImp219-1 Firmware
before 3.29.69
Schneider-ElectricImp219-1e Firmware
before 3.29.69
Schneider-ElectricImp219-1er Firmware
before 3.29.69
Schneider-ElectricIbp219-1er Firmware
before 3.29.69

Weakness classification

References