CVE-2018-7782

CWE-522 — Insufficiently Protected Credentials3 documents3 sources
Severity
8.8HIGH
EPSS
0.2%
top 58.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
21
Schneider-electric Ibp1110-1er FirmwareSchneider-electric Ibp219-1er FirmwareSchneider-electric Ibp319-1er Firmware+18 more
Timeline
PublishedJul 3
Latest updateMay 13

Description

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, authenticated users can view passwords in clear text.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages21 packages

▶CVEListV5schneider_electric_se/pelco_sarix_professional_v1Pelco Sarix Pro 1 st generation with firmware versions prior to 3.29.69

🔴Vulnerability Details

2
GHSA
GHSA-77h4-7g38-g5hm: In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3↗2022-05-13
▶
CVEList
CVE-2018-7782: In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3↗2018-07-03
▶
CVE-2018-7782 (HIGH CVSS 8.8) | In Schneider Electric Pelco Sarix P | cvebase.io