CVE-2018-7780

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, a buffer overflow vulnerability exist in cgi program "set".
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
schneiderCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 66%
VendorProductVersion
schneider-electricimps110-1_firmware
𝑥
< 3.29.69
schneider-electricimps110-1e_firmware
𝑥
< 3.29.69
schneider-electricimps110-1er_firmware
𝑥
< 3.29.69
schneider-electricibps110-1er_firmware
𝑥
< 3.29.69
schneider-electricimp1110-1_firmware
𝑥
< 3.29.69
schneider-electricimp1110-1e_firmware
𝑥
< 3.29.69
schneider-electricimp1110-1er_firmware
𝑥
< 3.29.69
schneider-electricibp1110-1er_firmware
𝑥
< 3.29.69
schneider-electricimp219-1_firmware
𝑥
< 3.29.69
schneider-electricimp219-1e_firmware
𝑥
< 3.29.69
schneider-electricimp219-1er_firmware
𝑥
< 3.29.69
schneider-electricibp219-1er_firmware
𝑥
< 3.29.69
schneider-electricimp319-1_firmware
𝑥
< 3.29.69
schneider-electricimp319-1e_firmware
𝑥
< 3.29.69
schneider-electricimp319-1er_firmware
𝑥
< 3.29.69
schneider-electricibp319-1er_firmware
𝑥
< 3.29.69
schneider-electricimp519-1_firmware
𝑥
< 3.29.69
schneider-electricimp519-1e_firmware
𝑥
< 3.29.69
schneider-electricimp519-1er_firmware
𝑥
< 3.29.69
schneider-electricibp519-1er_firmware
𝑥
< 3.29.69
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.schneider-electric.com/en/download/document/SEVD-2018-114-01/
https://www.schneider-electric.com/en/download/document/SEVD-2018-114-01/