Back
CVE-2018-7238
CRITICAL
A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to execute arbitrary code.
Published: Mar 9, 2018
Modified: Jun 17, 2026
CWE-120
CVSS Metrics
CVSSv3
Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products (20)
| Vendor | Product | Version |
|---|---|---|
| schneider-electric | mps110-1_firmware | * < 3.29.67 |
| schneider-electric | imps110-1er_firmware | * < 3.29.67 |
| schneider-electric | ibps110-1er_firmware | * < 3.29.67 |
| schneider-electric | imp1110-1_firmware | * < 3.29.67 |
| schneider-electric | imp1110-1e_firmware | * < 3.29.67 |
| schneider-electric | imp1110-1er_firmware | * < 3.29.67 |
| schneider-electric | ibp1110-1er_firmware | * < 3.29.67 |
| schneider-electric | imp219-1_firmware | * < 3.29.67 |
| schneider-electric | imp219-1e_firmware | * < 3.29.67 |
| schneider-electric | imp219-1er_firmware | * < 3.29.67 |
| schneider-electric | ibp219-1er_firmware | * < 3.29.67 |
| schneider-electric | imp319-1_firmware | * < 3.29.67 |
| schneider-electric | imp319-1e_firmware | * < 3.29.67 |
| schneider-electric | ibp319-1er_firmware | * < 3.29.67 |
| schneider-electric | imp519-1_firmware | * < 3.29.67 |
| schneider-electric | imp319-1er_firmware | * < 3.29.67 |
| schneider-electric | imp519-1e_firmware | * < 3.29.67 |
| schneider-electric | imp519-1er_firmware | * < 3.29.67 |
| schneider-electric | ibp519-1er_firmware | * < 3.29.67 |
| schneider-electric | imps110-1e_firmware | * < 3.29.67 |
GitHub Security Advisory GHSA-pqq6-6c9f-5mpm
A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric's Pelco Sarix...
References (2)
- https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/ Patch, Vendor Advisory
- https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/ Patch, Vendor Advisory
Risk Scores
CVSS Score
9.8 / 10
EPSS Score
2.79%
Top 15% most likely to be exploited
Threat Score
40 / 100
Data Sources
NVD
EPSS
GitHub