NetSight
high8.8

CVE-2018-7829

An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen.

Impact

An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which allows an attacker to execute arbitrary system commands.

Affected products

VendorProductAffected versions
Schneider-ElectricD6220 Firmware
from 2.11
Schneider-ElectricD6220l Firmware
from 2.11
Schneider-ElectricD6230 Firmware
from 2.11
Schneider-ElectricD6230l Firmware
from 2.11
Schneider-ElectricImes19-1i Firmware
before 2.2.3.0
Schneider-ElectricImes19-1s Firmware
before 2.2.3.0
Schneider-ElectricImes19-1p Firmware
before 2.2.3.0
Schneider-ElectricIme119-1i Firmware
before 2.2.3.0
Schneider-ElectricIme119-1s Firmware
before 2.2.3.0
Schneider-ElectricIme119-1p Firmware
before 2.2.3.0
Schneider-ElectricIme219-1i Firmware
before 2.2.3.0
Schneider-ElectricIme219-1s Firmware
before 2.2.3.0

Weakness classification

References