Skip to content
OpenAdvisories
Unscored CVE-2018-7236 EUVD-2018-18975GHSA-9rxc-jvqg-fv36

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could enable SSH se…

Published Mar 9, 2018 · Updated Sep 16, 2024 · Assigned by schneider

Vendor: Schneider Electric Product: Pelco Sarix Professional Category: ICS / OT

Description

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could enable SSH service due to lack of authentication for /login/bin/set_param could enable SSH service.

Affected products

VendorProductAffectedFixed
Schneider Electric SE Pelco Sarix Professional all firmware versions prior to 3.29.76 —

References