← CVE Intelligence

CVE-2018-7237

Schneider Electric SE / Pelco Sarix Professional PUBLISHED

Description (CNA)

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow a remote attacker to delete arbitrary system file due to lack of validation of the /login/bin/set_param to the file name with the value of 'system.delete.sd_file'

Affected (CNA)

Vendor / productVersions
Schneider Electric SE / Pelco Sarix Professionalaffected all firmware versions prior to 3.29.77

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.