What’s Vulnerable › Vulnerabilities
CVE-2018-7816
- Severity: medium (CVSS 6.5 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2019-05-22 · updated 2026-06-17
Description
A Permissions, Privileges, and Access Control vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to delete an arbitrary file.
Affected products
- Schneider-Electric D6220 Firmware: from 2.11
- Schneider-Electric D6220L Firmware: from 2.11
- Schneider-Electric D6230 Firmware: from 2.11
- Schneider-Electric D6230L Firmware: from 2.11
- Schneider-Electric Ime119-1Ei Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime119-1Ep Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime119-1Es Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime119-1I Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime119-1P Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime119-1S Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime119-1Vi Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime119-1Vp Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime119-1Vs Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime219-1Ei Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime219-1Ep Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime219-1Es Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime219-1I Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime219-1P Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime219-1S Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime219-1Vi Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime219-1Vp Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime219-1Vs Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime3122-1Ei Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime3122-1Ep Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime3122-1Es Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime3122-1I Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime3122-1P Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime3122-1S Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime3122-1Vi Firmware: before 2.2.3.0 — fixed in 2.2.3.0
- Schneider-Electric Ime3122-1Vp Firmware: before 2.2.3.0 — fixed in 2.2.3.0
How to fix
Upgrade to a fixed version: Schneider-Electric Ime119-1Ei Firmware 2.2.3.0; Schneider-Electric Ime119-1Ep Firmware 2.2.3.0; Schneider-Electric Ime119-1Es Firmware 2.2.3.0; Schneider-Electric Ime119-1I Firmware 2.2.3.0; Schneider-Electric Ime119-1P Firmware 2.2.3.0; Schneider-Electric Ime119-1S Firmware 2.2.3.0; Schneider-Electric Ime119-1Vi Firmware 2.2.3.0; Schneider-Electric Ime119-1Vp Firmware 2.2.3.0; Schneider-Electric Ime119-1Vs Firmware 2.2.3.0; Schneider-Electric Ime219-1Ei Firmware 2.2.3.0; Schneider-Electric Ime219-1Ep Firmware 2.2.3.0; Schneider-Electric Ime219-1Es Firmware 2.2.3.0. Check the vendor advisory for mitigations.
References
- https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/
- https://www.schneider-electric.com/en/download/document/SEVD-2019-045-03/
Get alerted when CVE-2018-7816 or the next vulnerability affects your stack