CVE-2018-7236

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-03-09 · updated 2026-06-17
Weakness: CWE-287

Description

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could enable SSH service due to lack of authentication for /login/bin/set_param could enable SSH service.

Affected products

Schneider-Electric Ibp1110-1Er Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Ibp219-1Er Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Ibp319-1Er Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Ibp519-1Er Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Ibps110-1Er Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp1110-1 Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp1110-1E Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp1110-1Er Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp219-1 Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp219-1E Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp219-1Er Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp319-1 Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp319-1E Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp319-1Er Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp519-1 Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp519-1E Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp519-1Er Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imps110-1E Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imps110-1Er Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Mps110-1 Firmware: before 3.29.67 — fixed in 3.29.67

How to fix

Upgrade to a fixed version: Schneider-Electric Ibp1110-1Er Firmware 3.29.67; Schneider-Electric Ibp219-1Er Firmware 3.29.67; Schneider-Electric Ibp319-1Er Firmware 3.29.67; Schneider-Electric Ibp519-1Er Firmware 3.29.67; Schneider-Electric Ibps110-1Er Firmware 3.29.67; Schneider-Electric Imp1110-1 Firmware 3.29.67; Schneider-Electric Imp1110-1E Firmware 3.29.67; Schneider-Electric Imp1110-1Er Firmware 3.29.67; Schneider-Electric Imp219-1 Firmware 3.29.67; Schneider-Electric Imp219-1E Firmware 3.29.67; Schneider-Electric Imp219-1Er Firmware 3.29.67; Schneider-Electric Imp319-1 Firmware 3.29.67. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2018-7236 or the next vulnerability affects your stack