{"id":"CVE-2018-7829","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-7829","generatedAt":"2026-10-29T00:47:35.052Z","title":"An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen.","description":"An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which allows an attacker to execute arbitrary system commands.","published":"2019-05-22T20:29:01.000Z","lastModified":"2026-06-17T02:03:49.000Z","status":"Modified","sourceIdentifier":"cybersecurity@se.com","cvss":{"version":"3.0","score":8.8,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-943"],"affected":["schneider-electric/d6220 firmware","schneider-electric/d6220l firmware","schneider-electric/d6230 firmware","schneider-electric/d6230l firmware","schneider-electric/imes19-1i firmware","schneider-electric/imes19-1s firmware","schneider-electric/imes19-1p firmware","schneider-electric/ime119-1i firmware","schneider-electric/ime119-1s firmware","schneider-electric/ime119-1p firmware","schneider-electric/ime219-1i firmware","schneider-electric/ime219-1s firmware","schneider-electric/ime219-1p firmware","schneider-electric/ime319-1i firmware","schneider-electric/ime319-1s firmware","schneider-electric/ime319-1p firmware","schneider-electric/ime319-b1i firmware","schneider-electric/ime319-b1s firmware","schneider-electric/ime319-b1p firmware","schneider-electric/ime3122-1i firmware","schneider-electric/ime3122-b1i firmware","schneider-electric/ime3122-1s firmware","schneider-electric/ime3122-b1s firmware","schneider-electric/ime3122-1p firmware","schneider-electric/ime3122-b1p firmware","schneider-electric/imes19-1ei firmware","schneider-electric/imes19-1es firmware","schneider-electric/imes19-1ep firmware","schneider-electric/ime119-1ei firmware","schneider-electric/ime119-1es firmware","schneider-electric/ime119-1ep firmware","schneider-electric/ime219-1ei firmware","schneider-electric/ime219-1es firmware","schneider-electric/ime219-1ep firmware","schneider-electric/ime319-1ei firmware","schneider-electric/ime319-1es firmware","schneider-electric/ime319-1ep firmware","schneider-electric/ime3122-1ei firmware","schneider-electric/ime3122-1es firmware","schneider-electric/ime3122-1ep firmware","schneider-electric/imes19-1vi firmware","schneider-electric/imes19-1vs firmware","schneider-electric/imes19-1vp firmware","schneider-electric/ime119-1vi firmware","schneider-electric/ime119-1vs firmware","schneider-electric/ime119-1vp firmware","schneider-electric/ime219-1vi firmware","schneider-electric/ime219-1vs firmware","schneider-electric/ime219-1vp firmware","schneider-electric/ime319-1vi firmware","schneider-electric/ime319-1vs firmware","schneider-electric/ime319-1vp firmware","schneider-electric/ime3122-1vi firmware","schneider-electric/ime3122-1vs firmware","schneider-electric/ime3122-1vp firmware","schneider-electric/ixes1 firmware","schneider-electric/ixe11 firmware","schneider-electric/ixe21 firmware","schneider-electric/ixe31 firmware"],"epss":{"score":0.0169,"percentile":0.76941,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.69%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/","tags":["Mitigation","Vendor Advisory"],"source":"cybersecurity@se.com"},{"url":"https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/","tags":["Mitigation","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-7829","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}