Critical severity9.8NVD Advisory· Published Mar 9, 2018· Updated Jun 17, 2026

CVE-2018-7228

Description

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and get the administrator privileges.

Affected products

Schneider Electric/Pelco Sarix Professionalllm-fuzzy2 versions
<3.29.67+ 1 more
- (no CPE)range: <3.29.67
- (no CPE)range: all firmware versions prior to 3.29.68

Patches

Vulnerability mechanics

References

www.schneider-electric.com/en/download/document/SEVD-2018-058-01/nvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000