8.8

CVE-2018-7781

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear text and results in privilege escalation.

Data is provided by the National Vulnerability Database (NVD)
Schneider-electric ≫ Imps110-1 Firmware Version < 3.29.69
   Schneider-electric ≫ Imps110-1 Version-
Schneider-electric ≫ Imps110-1e Firmware Version < 3.29.69
   Schneider-electric ≫ Imps110-1e Version-
Schneider-electric ≫ Imps110-1er Firmware Version < 3.29.69
   Schneider-electric ≫ Imps110-1er Version-
Schneider-electric ≫ Ibps110-1er Firmware Version < 3.29.69
   Schneider-electric ≫ Ibps110-1er Version-
Schneider-electric ≫ Imp1110-1 Firmware Version < 3.29.69
   Schneider-electric ≫ Imp1110-1 Version-
Schneider-electric ≫ Imp1110-1e Firmware Version < 3.29.69
   Schneider-electric ≫ Imp1110-1e Version-
Schneider-electric ≫ Imp1110-1er Firmware Version < 3.29.69
   Schneider-electric ≫ Imp1110-1er Version-
Schneider-electric ≫ Ibp1110-1er Firmware Version < 3.29.69
   Schneider-electric ≫ Ibp1110-1er Version-
Schneider-electric ≫ Imp219-1 Firmware Version < 3.29.69
   Schneider-electric ≫ Imp219-1 Version-
Schneider-electric ≫ Imp219-1e Firmware Version < 3.29.69
   Schneider-electric ≫ Imp219-1e Version-
Schneider-electric ≫ Imp219-1er Firmware Version < 3.29.69
   Schneider-electric ≫ Imp219-1er Version-
Schneider-electric ≫ Ibp219-1er Firmware Version < 3.29.69
   Schneider-electric ≫ Ibp219-1er Version-
Schneider-electric ≫ Imp319-1 Firmware Version < 3.29.69
   Schneider-electric ≫ Imp319-1 Version-
Schneider-electric ≫ Imp319-1e Firmware Version < 3.29.69
   Schneider-electric ≫ Imp319-1e Version-
Schneider-electric ≫ Imp319-1er Firmware Version < 3.29.69
   Schneider-electric ≫ Imp319-1er Version-
Schneider-electric ≫ Ibp319-1er Firmware Version < 3.29.69
   Schneider-electric ≫ Ibp319-1er Version-
Schneider-electric ≫ Imp519-1 Firmware Version < 3.29.69
   Schneider-electric ≫ Imp519-1 Version-
Schneider-electric ≫ Imp519-1e Firmware Version < 3.29.69
   Schneider-electric ≫ Imp519-1e Version-
Schneider-electric ≫ Imp519-1er Firmware Version < 3.29.69
   Schneider-electric ≫ Imp519-1er Version-
Schneider-electric ≫ Ibp519-1er Firmware Version < 3.29.69
   Schneider-electric ≫ Ibp519-1er Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.15% 0.32
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
CWE-311 Missing Encryption of Sensitive Data

The product does not encrypt sensitive or critical information before storage or transmission.