VulnerabilityModified
CVE-2018-7227
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow retrieving of specially crafted URLs without authentication that can reveal sensitive information to an attacker.
MEDIUM 5.3EPSS 1.20%
Does this matter?
Lower severity and a low EPSS score (1.20%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow retrieving of specially crafted URLs without authentication that can reveal sensitive information to an attacker.
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 1.20% probability · 66th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- schneider-electric/mps110-1 firmware · schneider-electric/imps110-1er firmware · schneider-electric/ibps110-1er firmware · schneider-electric/imp1110-1 firmware · schneider-electric/imp1110-1e firmware · schneider-electric/imp1110-1er firmware · schneider-electric/ibp1110-1er firmware · schneider-electric/imp219-1 firmware · schneider-electric/imp219-1e firmware · schneider-electric/imp219-1er firmware · schneider-electric/ibp219-1er firmware · schneider-electric/imp319-1 firmware · schneider-electric/imp319-1e firmware · schneider-electric/ibp319-1er firmware · schneider-electric/imp519-1 firmware · schneider-electric/imp319-1er firmware · schneider-electric/imp519-1e firmware · schneider-electric/imp519-1er firmware · schneider-electric/ibp519-1er firmware · schneider-electric/imps110-1e firmware
- Source
- cybersecurity@se.com
References
- https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/Patch, Vendor Advisory
- https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.