NetSight
high8.8

CVE-2018-7825

A Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced Camera that could allow a remote attacker to execute arbitrary…

Impact

A Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands.

Affected products

VendorProductAffected versions
Schneider-ElectricD6220 Firmware
from 2.11
Schneider-ElectricD6220l Firmware
from 2.11
Schneider-ElectricD6230 Firmware
from 2.11
Schneider-ElectricD6230l Firmware
from 2.11
Schneider-ElectricImes19-1i Firmware
before 2.2.3.0
Schneider-ElectricImes19-1s Firmware
before 2.2.3.0
Schneider-ElectricImes19-1p Firmware
before 2.2.3.0
Schneider-ElectricIme119-1i Firmware
before 2.2.3.0
Schneider-ElectricIme119-1s Firmware
before 2.2.3.0
Schneider-ElectricIme119-1p Firmware
before 2.2.3.0
Schneider-ElectricIme219-1i Firmware
before 2.2.3.0
Schneider-ElectricIme219-1s Firmware
before 2.2.3.0

Weakness classification

References