What’s Vulnerable › Vulnerabilities

CVE-2018-7229

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-03-09 · updated 2026-06-17
• Weakness: CWE-798

Description

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and gain administrator privileges because the use of hardcoded credentials.

Affected products

• Schneider-Electric Ibp1110-1Er Firmware: before 3.29.67 — fixed in 3.29.67
• Schneider-Electric Ibp219-1Er Firmware: before 3.29.67 — fixed in 3.29.67
• Schneider-Electric Ibp319-1Er Firmware: before 3.29.67 — fixed in 3.29.67
• Schneider-Electric Ibp519-1Er Firmware: before 3.29.67 — fixed in 3.29.67
• Schneider-Electric Ibps110-1Er Firmware: before 3.29.67 — fixed in 3.29.67
• Schneider-Electric Imp1110-1 Firmware: before 3.29.67 — fixed in 3.29.67
• Schneider-Electric Imp1110-1E Firmware: before 3.29.67 — fixed in 3.29.67
• Schneider-Electric Imp1110-1Er Firmware: before 3.29.67 — fixed in 3.29.67
• Schneider-Electric Imp219-1 Firmware: before 3.29.67 — fixed in 3.29.67
• Schneider-Electric Imp219-1E Firmware: before 3.29.67 — fixed in 3.29.67
• Schneider-Electric Imp219-1Er Firmware: before 3.29.67 — fixed in 3.29.67
• Schneider-Electric Imp319-1 Firmware: before 3.29.67 — fixed in 3.29.67
• Schneider-Electric Imp319-1E Firmware: before 3.29.67 — fixed in 3.29.67
• Schneider-Electric Imp319-1Er Firmware: before 3.29.67 — fixed in 3.29.67
• Schneider-Electric Imp519-1 Firmware: before 3.29.67 — fixed in 3.29.67
• Schneider-Electric Imp519-1E Firmware: before 3.29.67 — fixed in 3.29.67
• Schneider-Electric Imp519-1Er Firmware: before 3.29.67 — fixed in 3.29.67
• Schneider-Electric Imps110-1E Firmware: before 3.29.67 — fixed in 3.29.67
• Schneider-Electric Imps110-1Er Firmware: before 3.29.67 — fixed in 3.29.67
• Schneider-Electric Mps110-1 Firmware: before 3.29.67 — fixed in 3.29.67

How to fix

Upgrade to a fixed version: Schneider-Electric Ibp1110-1Er Firmware 3.29.67; Schneider-Electric Ibp219-1Er Firmware 3.29.67; Schneider-Electric Ibp319-1Er Firmware 3.29.67; Schneider-Electric Ibp519-1Er Firmware 3.29.67; Schneider-Electric Ibps110-1Er Firmware 3.29.67; Schneider-Electric Imp1110-1 Firmware 3.29.67; Schneider-Electric Imp1110-1E Firmware 3.29.67; Schneider-Electric Imp1110-1Er Firmware 3.29.67; Schneider-Electric Imp219-1 Firmware 3.29.67; Schneider-Electric Imp219-1E Firmware 3.29.67; Schneider-Electric Imp219-1Er Firmware 3.29.67; Schneider-Electric Imp319-1 Firmware 3.29.67. Check the vendor advisory for mitigations.

References

• https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/
• https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/

Get alerted when CVE-2018-7229 or the next vulnerability affects your stack