high8.8
CVE-2018-7781
In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authen…
Impact
In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear text and results in privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Imps110-1 Firmware | before 3.29.69 |
| Schneider-Electric | Imps110-1e Firmware | before 3.29.69 |
| Schneider-Electric | Imps110-1er Firmware | before 3.29.69 |
| Schneider-Electric | Ibps110-1er Firmware | before 3.29.69 |
| Schneider-Electric | Imp1110-1 Firmware | before 3.29.69 |
| Schneider-Electric | Imp1110-1e Firmware | before 3.29.69 |
| Schneider-Electric | Imp1110-1er Firmware | before 3.29.69 |
| Schneider-Electric | Ibp1110-1er Firmware | before 3.29.69 |
| Schneider-Electric | Imp219-1 Firmware | before 3.29.69 |
| Schneider-Electric | Imp219-1e Firmware | before 3.29.69 |
| Schneider-Electric | Imp219-1er Firmware | before 3.29.69 |
| Schneider-Electric | Ibp219-1er Firmware | before 3.29.69 |