high8.8
CVE-2018-7828
A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen.
Impact
A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | D6220 Firmware | from 2.11 |
| Schneider-Electric | D6220l Firmware | from 2.11 |
| Schneider-Electric | D6230 Firmware | from 2.11 |
| Schneider-Electric | D6230l Firmware | from 2.11 |
| Schneider-Electric | Imes19-1i Firmware | before 2.2.3.0 |
| Schneider-Electric | Imes19-1s Firmware | before 2.2.3.0 |
| Schneider-Electric | Imes19-1p Firmware | before 2.2.3.0 |
| Schneider-Electric | Ime119-1i Firmware | before 2.2.3.0 |
| Schneider-Electric | Ime119-1s Firmware | before 2.2.3.0 |
| Schneider-Electric | Ime119-1p Firmware | before 2.2.3.0 |
| Schneider-Electric | Ime219-1i Firmware | before 2.2.3.0 |
| Schneider-Electric | Ime219-1s Firmware | before 2.2.3.0 |