CVSS 3.1
5.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NCVE-2018-7227
Medium (5.3) in schneider-electric. EPSS 1.2% chance of exploitation in the next 30 days.
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow retrieving of specially crafted URLs without authentication that can reveal sensitive information to an attacker.
Severity
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- schneider-electric:ibp1110-1er_firmware
- schneider-electric:ibp219-1er_firmware
- schneider-electric:ibp319-1er_firmware
- schneider-electric:ibp519-1er_firmware
- schneider-electric:ibps110-1er_firmware
- schneider-electric:imp1110-1_firmware
- schneider-electric:imp1110-1e_firmware
- schneider-electric:imp1110-1er_firmware
- schneider-electric:imp219-1_firmware
- schneider-electric:imp219-1e_firmware
- schneider-electric:imp219-1er_firmware
- schneider-electric:imp319-1_firmware
- schneider-electric:imp319-1e_firmware
- schneider-electric:imp319-1er_firmware
- schneider-electric:imp519-1_firmware
- schneider-electric:imp519-1e_firmware
- schneider-electric:imp519-1er_firmware
- schneider-electric:imps110-1e_firmware
- schneider-electric:imps110-1er_firmware
- schneider-electric:mps110-1_firmware