VULNERABILITY INTELLIGENCE

CVE-2018-7231

CVSS score9.8 CRITICAL
EPSS probability2.05%
CISA KEVNot currently listed
Published2018-03-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'system.opkg.remove'.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references