Code injection

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, authenticated users can view passwords in clear text...

Privilege escalation

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear text and results in privilege escalation...

Buffer overflow

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, a buffer overflow vulnerability exist in cgi program "set"...

CVE-2018-7782

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, authenticated users can view passwords in clear text...

CVE-2018-7780

Affected product: Schneider Electric Pelco Sarix Professional 1st generation IP cameras. Vulnerable component: CGI program f set in firmware versions prior to 3.29.69. Root cause: buffer overflow in the CGI handler, leading to potential arbitrary code execution or denial of service. Impact: per...

CVE-2018-7781

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear text and results in privilege escalation...

CVE-2018-7781

CVE-2018-7781 affects Schneider Electric Pelco Sarix Professional 1st generation IP cameras running firmware versions prior to 3.29.69. A specially crafted request by an authenticated user can cause the device to reveal passwords in plaintext, resulting in privilege escalation. The CVE is corrobo...

CVE-2018-7782

Affected products: Schneider Electric Pelco Sarix Professional 1st generation IP cameras. Vulnerability: in firmware versions prior to 3.29.69, authenticated users can view passwords in plaintext. Root cause / vector: improper handling of authentication data leading to password exposure (no explo...

Schneider Electric Pelco Sarix IP Camera Remote Detection

Detection of presence of Schneider Electric Pelco Sarix IP Camera. The script sends a HTTP GET connection request to the server and attempts to determine if the remote host runs Electric Pelco Sarix IP Camera from the response. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions migh...

CVE-2018-7230

A XML external entity XXE vulnerability exists in the import.cgi of the web interface component of the Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67...

Authentication flaw

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow retrieving of specially crafted URLs without authentication that can reveal sensitive information to an attacker...

CVE-2018-7228

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and get the administrator privileges...

CVE-2018-7237

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow a remote attacker to delete arbitrary system file due to lack of validation of the /login/bin/setparam to the file name with the value of 'system.delete.sdfile'...

Xxe

A XML external entity XXE vulnerability exists in the import.cgi of the web interface component of the Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67...

CVE-2018-7227

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow retrieving of specially crafted URLs without authentication that can reveal sensitive information to an attacker...

CVE-2018-7228

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and get the administrator privileges...

CVE-2018-7229

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and gain administrator privileges because the use of hardcoded credentials...

CVE-2018-7231

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'system.opkg.remove'...

CVE-2018-7227

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow retrieving of specially crafted URLs without authentication that can reveal sensitive information to an attacker...

Authentication flaw

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and get the administrator privileges...