8.8

CVE-2018-7781

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear text and results in privilege escalation.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Schneider-electric ≫ Imps110-1 Firmware Version < 3.29.69
   Schneider-electric ≫ Imps110-1 Version -
Schneider-electric ≫ Imps110-1e Firmware Version < 3.29.69
   Schneider-electric ≫ Imps110-1e Version -
Schneider-electric ≫ Imps110-1er Firmware Version < 3.29.69
   Schneider-electric ≫ Imps110-1er Version -
Schneider-electric ≫ Ibps110-1er Firmware Version < 3.29.69
   Schneider-electric ≫ Ibps110-1er Version -
Schneider-electric ≫ Imp1110-1 Firmware Version < 3.29.69
   Schneider-electric ≫ Imp1110-1 Version -
Schneider-electric ≫ Imp1110-1e Firmware Version < 3.29.69
   Schneider-electric ≫ Imp1110-1e Version -
Schneider-electric ≫ Imp1110-1er Firmware Version < 3.29.69
   Schneider-electric ≫ Imp1110-1er Version -
Schneider-electric ≫ Ibp1110-1er Firmware Version < 3.29.69
   Schneider-electric ≫ Ibp1110-1er Version -
Schneider-electric ≫ Imp219-1 Firmware Version < 3.29.69
   Schneider-electric ≫ Imp219-1 Version -
Schneider-electric ≫ Imp219-1e Firmware Version < 3.29.69
   Schneider-electric ≫ Imp219-1e Version -
Schneider-electric ≫ Imp219-1er Firmware Version < 3.29.69
   Schneider-electric ≫ Imp219-1er Version -
Schneider-electric ≫ Ibp219-1er Firmware Version < 3.29.69
   Schneider-electric ≫ Ibp219-1er Version -
Schneider-electric ≫ Imp319-1 Firmware Version < 3.29.69
   Schneider-electric ≫ Imp319-1 Version -
Schneider-electric ≫ Imp319-1e Firmware Version < 3.29.69
   Schneider-electric ≫ Imp319-1e Version -
Schneider-electric ≫ Imp319-1er Firmware Version < 3.29.69
   Schneider-electric ≫ Imp319-1er Version -
Schneider-electric ≫ Ibp319-1er Firmware Version < 3.29.69
   Schneider-electric ≫ Ibp319-1er Version -
Schneider-electric ≫ Imp519-1 Firmware Version < 3.29.69
   Schneider-electric ≫ Imp519-1 Version -
Schneider-electric ≫ Imp519-1e Firmware Version < 3.29.69
   Schneider-electric ≫ Imp519-1e Version -
Schneider-electric ≫ Imp519-1er Firmware Version < 3.29.69
   Schneider-electric ≫ Imp519-1er Version -
Schneider-electric ≫ Ibp519-1er Firmware Version < 3.29.69
   Schneider-electric ≫ Ibp519-1er Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.59% 0.436
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
CWE-311 Missing Encryption of Sensitive Data

The product does not encrypt sensitive or critical information before storage or transmission.

https://www.schneider-electric.com/en/download/document/SEVD-2018-114-01/
Vendor Advisory