Arbitrary file deletion vulnerability in Schneider Pelco Sarix Pro camera set program system.delete.sd_file

Pelco Sarix Pro is a video surveillance device from Schneider Electric France. An arbitrary file deletion vulnerability exists in the Schneider Pelco Sarix Pro camera set program system.delete.sdfile, which can be exploited by an attacker to delete arbitrary system files via an http request...

CVE-2018-7237: Improper Input Validation

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow a remote attacker to delete arbitrary system file due to lack of validation of the /login/bin/setparam to the file name with the value of 'system.delete.sdfile'...

Schneider Electric Pelco Sarix Professional Arbitrary File Deletion Vulnerability

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A security vulnerability exists in the Schneider Electric Pelco Sarix Professional using firmware prior to version 3.29.67, which originates from the /login/bin/setparam program failing ...