CVE-2018-7233

CVE-2018-7233 affects Schneider Electric’s Pelco Sarix Professional, with firmware versions prior to 3.29.67. The vulnerability arises from lack of validation of shell metacharacters in the values of model_name or mac_address, enabling command execution. The NVD data lists a high/critical impact ...