Command Injection Vulnerability in Schneider Pelco Sarix Pro Camera set Program system.opkg.remove

Pelco Sarix Pro is a video surveillance device from Schneider Electric France. A command injection vulnerability exists in the Schneider Pelco Sarix Pro camera set program system.opkg.remove, which can be exploited by an attacker to execute arbitrary commands in the background via an http request...

CVE-2018-7231

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'system.opkg.remove'...

Schneider Electric Pelco Sarix Professional Command Execution Vulnerability (CNVD-2018-05325)

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A security vulnerability in the Schneider Electric Pelco Sarix Professional using firmware prior to version 3.29.67 exists because the program fails to validate shell metacharacters with...