← CVE Intelligence

CVE-2018-7235

Schneider Electric SE / Pelco Sarix Professional PUBLISHED

Description (CNA)

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of 'system.download.sd_file'

Affected (CNA)

Vendor / productVersions
Schneider Electric SE / Pelco Sarix Professionalaffected all firmware versions prior to 3.29.75

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.