CVE-2018-7780 In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, a buffer overflow vulnerability exist in cgi program "set".
CriticalCVSS 9.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, a buffer overflow vulnerability exist in cgi program "set".
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric imps110-1 firmware | < 3.29.69 | 3.29.69 |
| schneider-electric imps110-1e firmware | < 3.29.69 | 3.29.69 |
| schneider-electric imps110-1er firmware | < 3.29.69 | 3.29.69 |
| schneider-electric ibps110-1er firmware | < 3.29.69 | 3.29.69 |
| schneider-electric imp1110-1 firmware | < 3.29.69 | 3.29.69 |
| schneider-electric imp1110-1e firmware | < 3.29.69 | 3.29.69 |
| schneider-electric imp1110-1er firmware | < 3.29.69 | 3.29.69 |
| schneider-electric ibp1110-1er firmware | < 3.29.69 | 3.29.69 |
| schneider-electric imp219-1 firmware | < 3.29.69 | 3.29.69 |
| schneider-electric imp219-1e firmware | < 3.29.69 | 3.29.69 |
| schneider-electric imp219-1er firmware | < 3.29.69 | 3.29.69 |
| schneider-electric ibp219-1er firmware | < 3.29.69 | 3.29.69 |
| schneider-electric imp319-1 firmware | < 3.29.69 | 3.29.69 |
| schneider-electric imp319-1e firmware | < 3.29.69 | 3.29.69 |
| schneider-electric imp319-1er firmware | < 3.29.69 | 3.29.69 |
| schneider-electric ibp319-1er firmware | < 3.29.69 | 3.29.69 |
| schneider-electric imp519-1 firmware | < 3.29.69 | 3.29.69 |
| schneider-electric imp519-1e firmware | < 3.29.69 | 3.29.69 |
| schneider-electric imp519-1er firmware | < 3.29.69 | 3.29.69 |
| schneider-electric ibp519-1er firmware | < 3.29.69 | 3.29.69 |
| Schneider Electric SE Pelco Sarix Professional V1 | = Pelco Sarix Pro 1 st generation with firmware versions prior to 3.29.69 | No fix listed |
References
- www.schneider-electric.com vendor-advisory