CVE-2018-7816 A Permissions, Privileges, and Access Control vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to delete an arbitrary file.
MediumCVSS 6.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A Permissions, Privileges, and Access Control vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to delete an arbitrary file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric d6220 firmware | >= 2.11 | No fix listed |
| schneider-electric d6220l firmware | >= 2.11 | No fix listed |
| schneider-electric d6230 firmware | >= 2.11 | No fix listed |
| schneider-electric d6230l firmware | >= 2.11 | No fix listed |
| schneider-electric imes19-1i firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric imes19-1s firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric imes19-1p firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime119-1i firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime119-1s firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime119-1p firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime219-1i firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime219-1s firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime219-1p firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-1i firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-1s firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-1p firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-b1i firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-b1s firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-b1p firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-1i firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-b1i firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-1s firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-b1s firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-1p firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-b1p firmware | < 2.2.3.0 | 2.2.3.0 |
Show 36 more
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric imes19-1ei firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric imes19-1es firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric imes19-1ep firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime119-1ei firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime119-1es firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime119-1ep firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime219-1ei firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime219-1es firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime219-1ep firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-1ei firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-1es firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-1ep firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-1ei firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-1es firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-1ep firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric imes19-1vi firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric imes19-1vs firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric imes19-1vp firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime119-1vi firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime119-1vs firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime119-1vp firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime219-1vi firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime219-1vs firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime219-1vp firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-1vi firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-1vs firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-1vp firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-1vi firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-1vs firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-1vp firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ixes1 firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ixe11 firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ixe21 firmware | < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ixe31 firmware | < 2.2.3.0 | 2.2.3.0 |
| Pelco, Inc. Pelco Sarix Enhanced and Spectra Enhanced, Pelco Sarix Enhanced 1st generation and Spectra Enhanced PTZ | = Pelco Sarix Enhanced and Spectra Enhanced | No fix listed |
| Pelco, Inc. Pelco Sarix Enhanced and Spectra Enhanced, Pelco Sarix Enhanced 1st generation and Spectra Enhanced PTZ | = Pelco Sarix Enhanced 1st generation and Spectra Enhanced PTZ | No fix listed |
References
- www.schneider-electric.com patch vendor-advisory