Clear Text Password Exposure in Schneider Electric Pelco Sarix Cameras
CVE-2018-7782

8.8HIGH

Key Information:

Vendor

Schneider Electric
Status
Pelco Sarix Professional V1
Vendor
CVE Published:
3 July 2018

What is CVE-2018-7782?

Authenticated users of Schneider Electric's Pelco Sarix Professional 1st generation cameras may be able to view stored passwords in clear text. This vulnerability affects firmware versions prior to 3.29.69, posing a significant risk of unauthorized access. Ensuring that your device is updated to the latest firmware is crucial in mitigating this vulnerability and securing sensitive information from exposure.

Affected Version(s)

Pelco Sarix Professional V1 Pelco Sarix Pro 1 st generation with firmware versions prior to 3.29.69

References

https://www.schneider-electric.com/en/download/document/S...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2018-7782 : Clear Text Password Exposure in Schneider Electric Pelco Sarix Cameras