8.1

CVE-2018-7236

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could enable SSH service due to lack of authentication for /login/bin/set_param could enable SSH service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Schneider-electric ≫ Mps110-1 Firmware Version < 3.29.67
   Schneider-electric ≫ Mps110-1 Version -
Schneider-electric ≫ Imps110-1er Firmware Version < 3.29.67
   Schneider-electric ≫ Imps110-1er Version -
Schneider-electric ≫ Ibps110-1er Firmware Version < 3.29.67
   Schneider-electric ≫ Ibps110-1er Version -
Schneider-electric ≫ Imp1110-1 Firmware Version < 3.29.67
   Schneider-electric ≫ Imp1110-1 Version -
Schneider-electric ≫ Imp1110-1e Firmware Version < 3.29.67
   Schneider-electric ≫ Imp1110-1e Version -
Schneider-electric ≫ Imp1110-1er Firmware Version < 3.29.67
   Schneider-electric ≫ Imp1110-1er Version -
Schneider-electric ≫ Ibp1110-1er Firmware Version < 3.29.67
   Schneider-electric ≫ Ibp1110-1er Version -
Schneider-electric ≫ Imp219-1 Firmware Version < 3.29.67
   Schneider-electric ≫ Imp219-1 Version -
Schneider-electric ≫ Imp219-1e Firmware Version < 3.29.67
   Schneider-electric ≫ Imp219-1e Version -
Schneider-electric ≫ Imp219-1er Firmware Version < 3.29.67
   Schneider-electric ≫ Imp219-1er Version -
Schneider-electric ≫ Ibp219-1er Firmware Version < 3.29.67
   Schneider-electric ≫ Ibp219-1er Version -
Schneider-electric ≫ Imp319-1 Firmware Version < 3.29.67
   Schneider-electric ≫ Imp319-1 Version -
Schneider-electric ≫ Imp319-1e Firmware Version < 3.29.67
   Schneider-electric ≫ Imp319-1e Version -
Schneider-electric ≫ Ibp319-1er Firmware Version < 3.29.67
   Schneider-electric ≫ Ibp319-1er Version -
Schneider-electric ≫ Imp519-1 Firmware Version < 3.29.67
   Schneider-electric ≫ Imp519-1 Version -
Schneider-electric ≫ Imp319-1er Firmware Version < 3.29.67
   Schneider-electric ≫ Imp319-1er Version -
Schneider-electric ≫ Imp519-1e Firmware Version < 3.29.67
   Schneider-electric ≫ Imp519-1e Version -
Schneider-electric ≫ Imp519-1er Firmware Version < 3.29.67
   Schneider-electric ≫ Imp519-1er Version -
Schneider-electric ≫ Ibp519-1er Firmware Version < 3.29.67
   Schneider-electric ≫ Ibp519-1er Version -
Schneider-electric ≫ Imps110-1e Firmware Version < 3.29.67
   Schneider-electric ≫ Imps110-1e Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.33% 0.687
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.1 2.8 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
NIST 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/
Patch
Vendor Advisory