CVE-2018-7232

CVE-2018-7232 affects Schneider Electric’s Pelco Sarix Professional, all firmware versions prior to 3.29.67. The root cause is a lack of validation of shell metacharacters in the value of 'network.ieee8021x.delete_certs', which can permit command execution. Impact is high (per CVSS:3.1 base score...