cbcvebase.
CVE-2018-7829
published 2019-05-22

CVE-2018-7829: An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which…

PriorityP355high8.8CVSS 3.0
AVNACLPRLUINSUCHIHAH
EPSS
1.72%
74.9th percentile
An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which allows an attacker to execute arbitrary system commands.

Affected

59 ranges· showing 25
VendorProductVersion rangeFixed in
schneider-electricd6220_firmware>= 2.11—
schneider-electricd6220l_firmware>= 2.11—
schneider-electricd6230_firmware>= 2.11—
schneider-electricd6230l_firmware>= 2.11—
schneider-electricime119-1ei_firmware< 2.2.3.02.2.3.0
schneider-electricime119-1ep_firmware< 2.2.3.02.2.3.0
schneider-electricime119-1es_firmware< 2.2.3.02.2.3.0
schneider-electricime119-1i_firmware< 2.2.3.02.2.3.0
schneider-electricime119-1p_firmware< 2.2.3.02.2.3.0
schneider-electricime119-1s_firmware< 2.2.3.02.2.3.0
schneider-electricime119-1vi_firmware< 2.2.3.02.2.3.0
schneider-electricime119-1vp_firmware< 2.2.3.02.2.3.0
schneider-electricime119-1vs_firmware< 2.2.3.02.2.3.0
schneider-electricime219-1ei_firmware< 2.2.3.02.2.3.0
schneider-electricime219-1ep_firmware< 2.2.3.02.2.3.0
schneider-electricime219-1es_firmware< 2.2.3.02.2.3.0
schneider-electricime219-1i_firmware< 2.2.3.02.2.3.0
schneider-electricime219-1p_firmware< 2.2.3.02.2.3.0
schneider-electricime219-1s_firmware< 2.2.3.02.2.3.0
schneider-electricime219-1vi_firmware< 2.2.3.02.2.3.0
schneider-electricime219-1vp_firmware< 2.2.3.02.2.3.0
schneider-electricime219-1vs_firmware< 2.2.3.02.2.3.0
schneider-electricime3122-1ei_firmware< 2.2.3.02.2.3.0
schneider-electricime3122-1ep_firmware< 2.2.3.02.2.3.0
schneider-electricime3122-1es_firmware< 2.2.3.02.2.3.0

CVSS provenance

nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.