CVE-2018-7238

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-03-09 · updated 2026-06-17
Weakness: CWE-120

Description

A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to execute arbitrary code.

Affected products

Schneider-Electric Ibp1110-1Er Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Ibp219-1Er Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Ibp319-1Er Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Ibp519-1Er Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Ibps110-1Er Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp1110-1 Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp1110-1E Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp1110-1Er Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp219-1 Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp219-1E Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp219-1Er Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp319-1 Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp319-1E Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp319-1Er Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp519-1 Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp519-1E Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imp519-1Er Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imps110-1E Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Imps110-1Er Firmware: before 3.29.67 — fixed in 3.29.67
Schneider-Electric Mps110-1 Firmware: before 3.29.67 — fixed in 3.29.67

How to fix

Upgrade to a fixed version: Schneider-Electric Ibp1110-1Er Firmware 3.29.67; Schneider-Electric Ibp219-1Er Firmware 3.29.67; Schneider-Electric Ibp319-1Er Firmware 3.29.67; Schneider-Electric Ibp519-1Er Firmware 3.29.67; Schneider-Electric Ibps110-1Er Firmware 3.29.67; Schneider-Electric Imp1110-1 Firmware 3.29.67; Schneider-Electric Imp1110-1E Firmware 3.29.67; Schneider-Electric Imp1110-1Er Firmware 3.29.67; Schneider-Electric Imp219-1 Firmware 3.29.67; Schneider-Electric Imp219-1E Firmware 3.29.67; Schneider-Electric Imp219-1Er Firmware 3.29.67; Schneider-Electric Imp319-1 Firmware 3.29.67. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2018-7238 or the next vulnerability affects your stack