CVE-2018-7227

2018-03-0923:00:00

schneider

www.cve.org

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

35.5%

JSON

A vulnerability exists in Schneider Electric’s Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow retrieving of specially crafted URLs without authentication that can reveal sensitive information to an attacker.

CNA Affected

[
  {
    "product": "Pelco Sarix Professional",
    "vendor": "Schneider Electric SE",
    "versions": [
      {
        "status": "affected",
        "version": "all firmware versions prior to 3.29.67"
      }
    ]
  }
]

References

www.schneider-electric.com/en/download/document/SEVD-2018-058-01/