5.4
CVE-2018-7827
- EPSS 0.23%
- Published 22.05.2019 20:29:01
- Last modified 21.11.2024 04:12:48
- Source cybersecurity@se.com
- Teams watchlist Login
- Open Login
A Cross-Site Scripting (XSS) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which a remote attacker can execute arbitrary HTML and script code in a user’s browser session.
Data is provided by the National Vulnerability Database (NVD)
Schneider-electric ≫ D6220 Firmware Version >= 2.11
Schneider-electric ≫ D6220l Firmware Version >= 2.11
Schneider-electric ≫ D6230 Firmware Version >= 2.11
Schneider-electric ≫ D6230l Firmware Version >= 2.11
Schneider-electric ≫ Imes19-1i Firmware Version < 2.2.3.0
Schneider-electric ≫ Imes19-1s Firmware Version < 2.2.3.0
Schneider-electric ≫ Imes19-1p Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime119-1i Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime119-1s Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime119-1p Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime219-1i Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime219-1s Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime219-1p Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime319-1i Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime319-1s Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime319-1p Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime319-b1i Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime319-b1s Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime319-b1p Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime3122-1i Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime3122-b1i Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime3122-1s Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime3122-b1s Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime3122-1p Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime3122-b1p Firmware Version < 2.2.3.0
Schneider-electric ≫ Imes19-1ei Firmware Version < 2.2.3.0
Schneider-electric ≫ Imes19-1es Firmware Version < 2.2.3.0
Schneider-electric ≫ Imes19-1ep Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime119-1ei Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime119-1es Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime119-1ep Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime219-1ei Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime219-1es Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime219-1ep Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime319-1ei Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime319-1es Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime319-1ep Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime3122-1ei Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime3122-1es Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime3122-1ep Firmware Version < 2.2.3.0
Schneider-electric ≫ Imes19-1vi Firmware Version < 2.2.3.0
Schneider-electric ≫ Imes19-1vs Firmware Version < 2.2.3.0
Schneider-electric ≫ Imes19-1vp Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime119-1vi Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime119-1vs Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime119-1vp Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime219-1vi Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime219-1vs Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime219-1vp Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime319-1vi Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime319-1vs Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime319-1vp Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime3122-1vi Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime3122-1vs Firmware Version < 2.2.3.0
Schneider-electric ≫ Ime3122-1vp Firmware Version < 2.2.3.0
Schneider-electric ≫ Ixes1 Firmware Version < 2.2.3.0
Schneider-electric ≫ Ixe11 Firmware Version < 2.2.3.0
Schneider-electric ≫ Ixe21 Firmware Version < 2.2.3.0
Schneider-electric ≫ Ixe31 Firmware Version < 2.2.3.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.23% | 0.425 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5.4 | 2.3 | 2.7 |
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
|
| nvd@nist.gov | 3.5 | 6.8 | 2.9 |
AV:N/AC:M/Au:S/C:N/I:P/A:N
|
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.