VULNERABILITY INTELLIGENCE

CVE-2018-7234

CVSS score7.5 HIGH
EPSS probability0.96%
CISA KEVNot currently listed
Published2018-03-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of SSL certificate.

Weakness classification

  • CWE-295: Improper Certificate Validation

Primary references