What’s Vulnerable › Vulnerabilities

CVE-2018-7781

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-07-03 · updated 2026-06-17
• Weakness: CWE-311

Description

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear text and results in privilege escalation.

Affected products

• Schneider-Electric Ibp1110-1Er Firmware: before 3.29.69 — fixed in 3.29.69
• Schneider-Electric Ibp219-1Er Firmware: before 3.29.69 — fixed in 3.29.69
• Schneider-Electric Ibp319-1Er Firmware: before 3.29.69 — fixed in 3.29.69
• Schneider-Electric Ibp519-1Er Firmware: before 3.29.69 — fixed in 3.29.69
• Schneider-Electric Ibps110-1Er Firmware: before 3.29.69 — fixed in 3.29.69
• Schneider-Electric Imp1110-1 Firmware: before 3.29.69 — fixed in 3.29.69
• Schneider-Electric Imp1110-1E Firmware: before 3.29.69 — fixed in 3.29.69
• Schneider-Electric Imp1110-1Er Firmware: before 3.29.69 — fixed in 3.29.69
• Schneider-Electric Imp219-1 Firmware: before 3.29.69 — fixed in 3.29.69
• Schneider-Electric Imp219-1E Firmware: before 3.29.69 — fixed in 3.29.69
• Schneider-Electric Imp219-1Er Firmware: before 3.29.69 — fixed in 3.29.69
• Schneider-Electric Imp319-1 Firmware: before 3.29.69 — fixed in 3.29.69
• Schneider-Electric Imp319-1E Firmware: before 3.29.69 — fixed in 3.29.69
• Schneider-Electric Imp319-1Er Firmware: before 3.29.69 — fixed in 3.29.69
• Schneider-Electric Imp519-1 Firmware: before 3.29.69 — fixed in 3.29.69
• Schneider-Electric Imp519-1E Firmware: before 3.29.69 — fixed in 3.29.69
• Schneider-Electric Imp519-1Er Firmware: before 3.29.69 — fixed in 3.29.69
• Schneider-Electric Imps110-1 Firmware: before 3.29.69 — fixed in 3.29.69
• Schneider-Electric Imps110-1E Firmware: before 3.29.69 — fixed in 3.29.69
• Schneider-Electric Imps110-1Er Firmware: before 3.29.69 — fixed in 3.29.69

How to fix

Upgrade to a fixed version: Schneider-Electric Ibp1110-1Er Firmware 3.29.69; Schneider-Electric Ibp219-1Er Firmware 3.29.69; Schneider-Electric Ibp319-1Er Firmware 3.29.69; Schneider-Electric Ibp519-1Er Firmware 3.29.69; Schneider-Electric Ibps110-1Er Firmware 3.29.69; Schneider-Electric Imp1110-1 Firmware 3.29.69; Schneider-Electric Imp1110-1E Firmware 3.29.69; Schneider-Electric Imp1110-1Er Firmware 3.29.69; Schneider-Electric Imp219-1 Firmware 3.29.69; Schneider-Electric Imp219-1E Firmware 3.29.69; Schneider-Electric Imp219-1Er Firmware 3.29.69; Schneider-Electric Imp319-1 Firmware 3.29.69. Check the vendor advisory for mitigations.

References

• https://www.schneider-electric.com/en/download/document/SEVD-2018-114-01/
• https://www.schneider-electric.com/en/download/document/SEVD-2018-114-01/

Get alerted when CVE-2018-7781 or the next vulnerability affects your stack