VULNERABILITY INTELLIGENCE

CVE-2018-7228

CVSS score9.8 CRITICAL
EPSS probability2.19%
CISA KEVNot currently listed
Published2018-03-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and get the administrator privileges.

Weakness classification

  • CWE-287: Improper Authentication

Primary references