Command Execution Vulnerability in Pelco Sarix Professional by Schneider Electric
CVE-2018-7233
9.8CRITICAL
Key Information:
- Vendor
Schneider Electric
- Status
- Vendor
- CVE Published:
- 9 March 2018
What is CVE-2018-7233?
A security flaw is present in Schneider Electric's Pelco Sarix Professional, affecting all firmware versions before 3.29.67. The vulnerability arises from improper validation of shell meta characters in 'model_name' and 'mac_address' values, potentially allowing unauthorized command execution on the device. This could lead to unauthorized access or manipulation, posing significant risks to security and functionality.
Affected Version(s)
Pelco Sarix Professional all firmware versions prior to 3.29.73