Skip to content
OpenAdvisories
Unscored CVE-2018-7232 EUVD-2018-18971GHSA-gjw6-q6c7-wvr7

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow executi…

Published Mar 9, 2018 · Updated Sep 17, 2024 · Assigned by schneider

Vendor: Schneider Electric Product: Pelco Sarix Professional Category: ICS / OT

Description

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'network.ieee8021x.delete_certs'.

Affected products

VendorProductAffectedFixed
Schneider Electric SE Pelco Sarix Professional all firmware versions prior to 3.29.72 —

References