CVEvulnerability

CVE-2018-7826

8.8 HIGH Published 2019-05-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-05-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-77

Description

A Command Injection vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands.

Affected configurations

• schneider-electric d6220 firmware (>= 2.11) • schneider-electric d6220l firmware (>= 2.11) • schneider-electric d6230 firmware (>= 2.11) • schneider-electric d6230l firmware (>= 2.11) • schneider-electric imes19-1i firmware (< 2.2.3.0) • schneider-electric imes19-1s firmware (< 2.2.3.0) • schneider-electric imes19-1p firmware (< 2.2.3.0) • schneider-electric ime119-1i firmware (< 2.2.3.0) • schneider-electric ime119-1s firmware (< 2.2.3.0) • schneider-electric ime119-1p firmware (< 2.2.3.0) • schneider-electric ime219-1i firmware (< 2.2.3.0) • schneider-electric ime219-1s firmware (< 2.2.3.0) • schneider-electric ime219-1p firmware (< 2.2.3.0) • schneider-electric ime319-1i firmware (< 2.2.3.0) • schneider-electric ime319-1s firmware (< 2.2.3.0) • schneider-electric ime319-1p firmware (< 2.2.3.0) • schneider-electric ime319-b1i firmware (< 2.2.3.0) • schneider-electric ime319-b1s firmware (< 2.2.3.0) • schneider-electric ime319-b1p firmware (< 2.2.3.0) • schneider-electric ime3122-1i firmware (< 2.2.3.0) • schneider-electric ime3122-b1i firmware (< 2.2.3.0) • schneider-electric ime3122-1s firmware (< 2.2.3.0) • schneider-electric ime3122-b1s firmware (< 2.2.3.0) • schneider-electric ime3122-1p firmware (< 2.2.3.0) • schneider-electric ime3122-b1p firmware (< 2.2.3.0) • schneider-electric imes19-1ei firmware (< 2.2.3.0) • schneider-electric imes19-1es firmware (< 2.2.3.0) • schneider-electric imes19-1ep firmware (< 2.2.3.0) • schneider-electric ime119-1ei firmware (< 2.2.3.0) • schneider-electric ime119-1es firmware (< 2.2.3.0) • schneider-electric ime119-1ep firmware (< 2.2.3.0) • schneider-electric ime219-1ei firmware (< 2.2.3.0) • schneider-electric ime219-1es firmware (< 2.2.3.0) • schneider-electric ime219-1ep firmware (< 2.2.3.0) • schneider-electric ime319-1ei firmware (< 2.2.3.0) • schneider-electric ime319-1es firmware (< 2.2.3.0) • schneider-electric ime319-1ep firmware (< 2.2.3.0) • schneider-electric ime3122-1ei firmware (< 2.2.3.0) • schneider-electric ime3122-1es firmware (< 2.2.3.0) • schneider-electric ime3122-1ep firmware (< 2.2.3.0) • schneider-electric imes19-1vi firmware (< 2.2.3.0) • schneider-electric imes19-1vs firmware (< 2.2.3.0) • schneider-electric imes19-1vp firmware (< 2.2.3.0) • schneider-electric ime119-1vi firmware (< 2.2.3.0) • schneider-electric ime119-1vs firmware (< 2.2.3.0) • schneider-electric ime119-1vp firmware (< 2.2.3.0) • schneider-electric ime219-1vi firmware (< 2.2.3.0) • schneider-electric ime219-1vs firmware (< 2.2.3.0) • schneider-electric ime219-1vp firmware (< 2.2.3.0) • schneider-electric ime319-1vi firmware (< 2.2.3.0) • schneider-electric ime319-1vs firmware (< 2.2.3.0) • schneider-electric ime319-1vp firmware (< 2.2.3.0) • schneider-electric ime3122-1vi firmware (< 2.2.3.0) • schneider-electric ime3122-1vs firmware (< 2.2.3.0) • schneider-electric ime3122-1vp firmware (< 2.2.3.0) • schneider-electric ixes1 firmware (< 2.2.3.0) • schneider-electric ixe11 firmware (< 2.2.3.0) • schneider-electric ixe21 firmware (< 2.2.3.0) • schneider-electric ixe31 firmware (< 2.2.3.0)

Related

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References