ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2018-7234

—
CVSS 3.1
7.5 high
EPSS
<1%p59
Published
()
Modified
Description

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of SSL certificate.

Vendors
schneider-electric
Products
mps110-1 firmware, imps110-1er firmware, ibps110-1er firmware, imp1110-1 firmware, imp1110-1e firmware, imp1110-1er firmware, ibp1110-1er firmware, imp219-1 firmware, imp219-1e firmware, imp219-1er firmware, ibp219-1er firmware, imp319-1 firmware
Weakness
CWE-295
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news

No ingested article mentions this CVE yet.