CVE-2018-7829

🗓️ 22 May 2019 19:35:13Reported by schneiderType

cve🔗 web.nvd.nist.gov👁 70 Views🌐 WEB

An Improper Neutralization of Special Elements in Query vulnerability in 1st Gen. Pelco Sarix Enhanced Camera & Spectra Enhanced PTZ Camera allows arbitrary system command execution

Reporter	Title	Published	Views	Family All 7
CNVD	Schneider Electric 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera Arbitrary OS Command Execution Vulnerability	24 May 201900:00	–	cnvd
Cvelist	CVE-2018-7829	22 May 201919:35	–	cvelist
EUVD	EUVD-2018-19541	7 Oct 202500:30	–	euvd
NVD	CVE-2018-7829	22 May 201920:29	–	nvd
Prion	Design/Logic Flaw	22 May 201920:29	–	prion
RedhatCVE	CVE-2018-7829	22 May 202504:00	–	redhatcve
Zero Science Lab	Schneider Electric Pelco Sarix/Spectra Cameras Root Remote Code Execution	10 Jul 201700:00	–	zeroscience

NVD

Node

schneider-electric d6220_firmwareRange2.11≥

AND

schneider-electric d6220Match-

Node

schneider-electric d6220l_firmwareRange2.11≥

AND

schneider-electric d6220lMatch-

Node

schneider-electric d6230_firmwareRange2.11≥

AND

schneider-electric d6230Match-

Node

schneider-electric d6230l_firmwareRange2.11≥

AND

schneider-electric d6230lMatch-

Node

schneider-electric imes19-1i_firmwareRange<2.2.3.0

AND

schneider-electric imes19-1iMatch-

Node

schneider-electric imes19-1s_firmwareRange<2.2.3.0

AND

schneider-electric imes19-1sMatch-

Node

schneider-electric imes19-1p_firmwareRange<2.2.3.0

AND

schneider-electric imes19-1pMatch-

Node

schneider-electric ime119-1i_firmwareRange<2.2.3.0

AND

schneider-electric ime119-1iMatch-

Node

schneider-electric ime119-1s_firmwareRange<2.2.3.0

AND

schneider-electric ime119-1sMatch-

Node

schneider-electric ime119-1p_firmwareRange<2.2.3.0

AND

schneider-electric ime119-1pMatch-

Node

schneider-electric ime219-1i_firmwareRange<2.2.3.0

AND

schneider-electric ime219-1iMatch-

Node

schneider-electric ime219-1s_firmwareRange<2.2.3.0

AND

schneider-electric ime219-1sMatch-

Node

schneider-electric ime219-1p_firmwareRange<2.2.3.0

AND

schneider-electric ime219-1pMatch-

Node

schneider-electric ime319-1i_firmwareRange<2.2.3.0

AND

schneider-electric ime319-1iMatch-

Node

schneider-electric ime319-1s_firmwareRange<2.2.3.0

AND

schneider-electric ime319-1sMatch-

Node

schneider-electric ime319-1p_firmwareRange<2.2.3.0

AND

schneider-electric ime319-1pMatch-

Node

schneider-electric ime319-b1i_firmwareRange<2.2.3.0

AND

schneider-electric ime319-b1iMatch-

Node

schneider-electric ime319-b1s_firmwareRange<2.2.3.0

AND

schneider-electric ime319-b1sMatch-

Node

schneider-electric ime319-b1p_firmwareRange<2.2.3.0

AND

schneider-electric ime319-b1pMatch-

Node

schneider-electric ime3122-1i_firmwareRange<2.2.3.0

AND

schneider-electric ime3122-1iMatch-

Node

schneider-electric ime3122-b1i_firmwareRange<2.2.3.0

AND

schneider-electric ime3122-b1iMatch-

Node

schneider-electric ime3122-1s_firmwareRange<2.2.3.0

AND

schneider-electric ime3122-1sMatch-

Node

schneider-electric ime3122-b1s_firmwareRange<2.2.3.0

AND

schneider-electric ime3122-b1sMatch-

Node

schneider-electric ime3122-1p_firmwareRange<2.2.3.0

AND

schneider-electric ime3122-1pMatch-

Node

schneider-electric ime3122-b1p_firmwareRange<2.2.3.0

AND

schneider-electric ime3122-b1pMatch-

Node

schneider-electric imes19-1ei_firmwareRange<2.2.3.0

AND

schneider-electric imes19-1eiMatch-

Node

schneider-electric imes19-1es_firmwareRange<2.2.3.0

AND

schneider-electric imes19-1esMatch-

Node

schneider-electric imes19-1ep_firmwareRange<2.2.3.0

AND

schneider-electric imes19-1epMatch-

Node

schneider-electric ime119-1ei_firmwareRange<2.2.3.0

AND

schneider-electric ime119-1eiMatch-

Node

schneider-electric ime119-1es_firmwareRange<2.2.3.0

AND

schneider-electric ime119-1esMatch-

Node

schneider-electric ime119-1ep_firmwareRange<2.2.3.0

AND

schneider-electric ime119-1epMatch-

Node

schneider-electric ime219-1ei_firmwareRange<2.2.3.0

AND

schneider-electric ime219-1eiMatch-

Node

schneider-electric ime219-1es_firmwareRange<2.2.3.0

AND

schneider-electric ime219-1esMatch-

Node

schneider-electric ime219-1ep_firmwareRange<2.2.3.0

AND

schneider-electric ime219-1epMatch-

Node

schneider-electric ime319-1ei_firmwareRange<2.2.3.0

AND

schneider-electric ime319-1eiMatch-

Node

schneider-electric ime319-1es_firmwareRange<2.2.3.0

AND

schneider-electric ime319-1esMatch-

Node

schneider-electric ime319-1ep_firmwareRange<2.2.3.0

AND

schneider-electric ime319-1epMatch-

Node

schneider-electric ime3122-1ei_firmwareRange<2.2.3.0

AND

schneider-electric ime3122-1eiMatch-

Node

schneider-electric ime3122-1es_firmwareRange<2.2.3.0

AND

schneider-electric ime3122-1esMatch-

Node

schneider-electric ime3122-1ep_firmwareRange<2.2.3.0

AND

schneider-electric ime3122-1epMatch-

Node

schneider-electric imes19-1vi_firmwareRange<2.2.3.0

AND

schneider-electric imes19-1viMatch-

Node

schneider-electric imes19-1vs_firmwareRange<2.2.3.0

AND

schneider-electric imes19-1vsMatch-

Node

schneider-electric imes19-1vp_firmwareRange<2.2.3.0

AND

schneider-electric imes19-1vpMatch-

Node

schneider-electric ime119-1vi_firmwareRange<2.2.3.0

AND

schneider-electric ime119-1viMatch-

Node

schneider-electric ime119-1vs_firmwareRange<2.2.3.0

AND

schneider-electric ime119-1vsMatch-

Node

schneider-electric ime119-1vp_firmwareRange<2.2.3.0

AND

schneider-electric ime119-1vpMatch-

Node

schneider-electric ime219-1vi_firmwareRange<2.2.3.0

AND

schneider-electric ime219-1viMatch-

Node

schneider-electric ime219-1vs_firmwareRange<2.2.3.0

AND

schneider-electric ime219-1vsMatch-

Node

schneider-electric ime219-1vp_firmwareRange<2.2.3.0

AND

schneider-electric ime219-1vpMatch-

Node

schneider-electric ime319-1vi_firmwareRange<2.2.3.0

AND

schneider-electric ime319-1viMatch-

Node

schneider-electric ime319-1vs_firmwareRange<2.2.3.0

AND

schneider-electric ime319-1vsMatch-

Node

schneider-electric ime319-1vp_firmwareRange<2.2.3.0

AND

schneider-electric ime319-1vpMatch-

Node

schneider-electric ime3122-1vi_firmwareRange<2.2.3.0

AND

schneider-electric ime3122-1viMatch-

Node

schneider-electric ime3122-1vs_firmwareRange<2.2.3.0

AND

schneider-electric ime3122-1vsMatch-

Node

schneider-electric ime3122-1vp_firmwareRange<2.2.3.0

AND

schneider-electric ime3122-1vpMatch-

Node

schneider-electric ixes1_firmwareRange<2.2.3.0

AND

schneider-electric ixes1Match-

Node

schneider-electric ixe11_firmwareRange<2.2.3.0

AND

schneider-electric ixe11Match-

Node

schneider-electric ixe21_firmwareRange<2.2.3.0

AND

schneider-electric ixe21Match-

Node

schneider-electric ixe31_firmwareRange<2.2.3.0

AND

schneider-electric ixe31Match-

[
  {
    "product": "Pelco Sarix Enhanced and Spectra Enhanced, Pelco Sarix Enhanced 1st generation and Spectra Enhanced PTZ",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Pelco Sarix Enhanced and Spectra Enhanced, Pelco Sarix Enhanced 1st generation and Spectra Enhanced PTZ"
      }
    ]
  }
]

Source	Link
schneider-electric	www.schneider-electric.com/en/download/document/SEVD-2019-045-03/

Parameter	Position	Path	Description	CWE
enable_leds	request body	setup/system/general/update	Authenticated remote code execution via unsanitized enable_leds parameter in GeneralSetupController.php updating LED config	CWE-943

21 Nov 2024 04:12Current

8.8High risk

Vulners AI Score8.8

CVSS 38.8

CVSS 29

EPSS0.00523

CWE-943