CVE-2018-7828
High
Description
A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera.
SeverityHigh
CVSS8.8
Exploit probability—
ProductSchneider-electric D6220 Firmware
PublishedMay 22, 2019
First seenMay 22, 2019
How to fix
Update
- schneider-electric imes19-1i_firmware2.2.3.0 or later
- schneider-electric imes19-1s_firmware2.2.3.0 or later
- schneider-electric imes19-1p_firmware2.2.3.0 or later
- schneider-electric ime119-1i_firmware2.2.3.0 or later
- schneider-electric ime119-1s_firmware2.2.3.0 or later
- schneider-electric ime119-1p_firmware2.2.3.0 or later
- schneider-electric ime219-1i_firmware2.2.3.0 or later
- schneider-electric ime219-1s_firmware2.2.3.0 or later
- schneider-electric ime219-1p_firmware2.2.3.0 or later
- schneider-electric ime319-1i_firmware2.2.3.0 or later
- schneider-electric ime319-1s_firmware2.2.3.0 or later
- schneider-electric ime319-1p_firmware2.2.3.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric d6220_firmware | 2.11 ≤ v | — |
| schneider-electric d6220l_firmware | 2.11 ≤ v | — |
| schneider-electric d6230_firmware | 2.11 ≤ v | — |
| schneider-electric d6230l_firmware | 2.11 ≤ v | — |
| schneider-electric imes19-1i_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric imes19-1s_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric imes19-1p_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime119-1i_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime119-1s_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime119-1p_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime219-1i_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime219-1s_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime219-1p_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-1i_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-1s_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-1p_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-b1i_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-b1s_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-b1p_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-1i_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-b1i_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-1s_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-b1s_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-1p_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-b1p_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric imes19-1ei_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric imes19-1es_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric imes19-1ep_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime119-1ei_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime119-1es_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime119-1ep_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime219-1ei_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime219-1es_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime219-1ep_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-1ei_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-1es_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-1ep_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-1ei_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-1es_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-1ep_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric imes19-1vi_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric imes19-1vs_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric imes19-1vp_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime119-1vi_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime119-1vs_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime119-1vp_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime219-1vi_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime219-1vs_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime219-1vp_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-1vi_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-1vs_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime319-1vp_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-1vi_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-1vs_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ime3122-1vp_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ixes1_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ixe11_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ixe21_firmware | v < 2.2.3.0 | 2.2.3.0 |
| schneider-electric ixe31_firmware | v < 2.2.3.0 | 2.2.3.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.