medium5.4
CVE-2018-7827
A Cross-Site Scripting (XSS) vulnerability exists in the 1st Gen.
Impact
A Cross-Site Scripting (XSS) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which a remote attacker can execute arbitrary HTML and script code in a user’s browser session.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | D6220 Firmware | from 2.11 |
| Schneider-Electric | D6220l Firmware | from 2.11 |
| Schneider-Electric | D6230 Firmware | from 2.11 |
| Schneider-Electric | D6230l Firmware | from 2.11 |
| Schneider-Electric | Imes19-1i Firmware | before 2.2.3.0 |
| Schneider-Electric | Imes19-1s Firmware | before 2.2.3.0 |
| Schneider-Electric | Imes19-1p Firmware | before 2.2.3.0 |
| Schneider-Electric | Ime119-1i Firmware | before 2.2.3.0 |
| Schneider-Electric | Ime119-1s Firmware | before 2.2.3.0 |
| Schneider-Electric | Ime119-1p Firmware | before 2.2.3.0 |
| Schneider-Electric | Ime219-1i Firmware | before 2.2.3.0 |
| Schneider-Electric | Ime219-1s Firmware | before 2.2.3.0 |