CVEvulnerability

CVE-2018-7828

8.8 HIGH Published 2019-05-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-05-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-352

Description

A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera.

Affected configurations

• schneider-electric d6220 firmware (>= 2.11) • schneider-electric d6220l firmware (>= 2.11) • schneider-electric d6230 firmware (>= 2.11) • schneider-electric d6230l firmware (>= 2.11) • schneider-electric imes19-1i firmware (< 2.2.3.0) • schneider-electric imes19-1s firmware (< 2.2.3.0) • schneider-electric imes19-1p firmware (< 2.2.3.0) • schneider-electric ime119-1i firmware (< 2.2.3.0) • schneider-electric ime119-1s firmware (< 2.2.3.0) • schneider-electric ime119-1p firmware (< 2.2.3.0) • schneider-electric ime219-1i firmware (< 2.2.3.0) • schneider-electric ime219-1s firmware (< 2.2.3.0) • schneider-electric ime219-1p firmware (< 2.2.3.0) • schneider-electric ime319-1i firmware (< 2.2.3.0) • schneider-electric ime319-1s firmware (< 2.2.3.0) • schneider-electric ime319-1p firmware (< 2.2.3.0) • schneider-electric ime319-b1i firmware (< 2.2.3.0) • schneider-electric ime319-b1s firmware (< 2.2.3.0) • schneider-electric ime319-b1p firmware (< 2.2.3.0) • schneider-electric ime3122-1i firmware (< 2.2.3.0) • schneider-electric ime3122-b1i firmware (< 2.2.3.0) • schneider-electric ime3122-1s firmware (< 2.2.3.0) • schneider-electric ime3122-b1s firmware (< 2.2.3.0) • schneider-electric ime3122-1p firmware (< 2.2.3.0) • schneider-electric ime3122-b1p firmware (< 2.2.3.0) • schneider-electric imes19-1ei firmware (< 2.2.3.0) • schneider-electric imes19-1es firmware (< 2.2.3.0) • schneider-electric imes19-1ep firmware (< 2.2.3.0) • schneider-electric ime119-1ei firmware (< 2.2.3.0) • schneider-electric ime119-1es firmware (< 2.2.3.0) • schneider-electric ime119-1ep firmware (< 2.2.3.0) • schneider-electric ime219-1ei firmware (< 2.2.3.0) • schneider-electric ime219-1es firmware (< 2.2.3.0) • schneider-electric ime219-1ep firmware (< 2.2.3.0) • schneider-electric ime319-1ei firmware (< 2.2.3.0) • schneider-electric ime319-1es firmware (< 2.2.3.0) • schneider-electric ime319-1ep firmware (< 2.2.3.0) • schneider-electric ime3122-1ei firmware (< 2.2.3.0) • schneider-electric ime3122-1es firmware (< 2.2.3.0) • schneider-electric ime3122-1ep firmware (< 2.2.3.0) • schneider-electric imes19-1vi firmware (< 2.2.3.0) • schneider-electric imes19-1vs firmware (< 2.2.3.0) • schneider-electric imes19-1vp firmware (< 2.2.3.0) • schneider-electric ime119-1vi firmware (< 2.2.3.0) • schneider-electric ime119-1vs firmware (< 2.2.3.0) • schneider-electric ime119-1vp firmware (< 2.2.3.0) • schneider-electric ime219-1vi firmware (< 2.2.3.0) • schneider-electric ime219-1vs firmware (< 2.2.3.0) • schneider-electric ime219-1vp firmware (< 2.2.3.0) • schneider-electric ime319-1vi firmware (< 2.2.3.0) • schneider-electric ime319-1vs firmware (< 2.2.3.0) • schneider-electric ime319-1vp firmware (< 2.2.3.0) • schneider-electric ime3122-1vi firmware (< 2.2.3.0) • schneider-electric ime3122-1vs firmware (< 2.2.3.0) • schneider-electric ime3122-1vp firmware (< 2.2.3.0) • schneider-electric ixes1 firmware (< 2.2.3.0) • schneider-electric ixe11 firmware (< 2.2.3.0) • schneider-electric ixe21 firmware (< 2.2.3.0) • schneider-electric ixe31 firmware (< 2.2.3.0)

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References