High severity8.8NVD Advisory· Published Mar 9, 2018· Updated Jun 17, 2026
CVE-2018-7230
CVE-2018-7230
Description
A XML external entity (XXE) vulnerability exists in the import.cgi of the web interface component of the Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67.
Affected products
22- cpe:2.3:o:schneider-electric:ibp1110-1er_firmware:*:*:*:*:*:*:*:*Range: <3.29.67
- cpe:2.3:o:schneider-electric:ibp219-1er_firmware:*:*:*:*:*:*:*:*Range: <3.29.67
- cpe:2.3:o:schneider-electric:ibp319-1er_firmware:*:*:*:*:*:*:*:*Range: <3.29.67
- cpe:2.3:o:schneider-electric:ibp519-1er_firmware:*:*:*:*:*:*:*:*Range: <3.29.67
- cpe:2.3:o:schneider-electric:ibps110-1er_firmware:*:*:*:*:*:*:*:*Range: <3.29.67
- cpe:2.3:o:schneider-electric:imp1110-1_firmware:*:*:*:*:*:*:*:*Range: <3.29.67
- cpe:2.3:o:schneider-electric:imp1110-1e_firmware:*:*:*:*:*:*:*:*Range: <3.29.67
- cpe:2.3:o:schneider-electric:imp1110-1er_firmware:*:*:*:*:*:*:*:*Range: <3.29.67
- cpe:2.3:o:schneider-electric:imp219-1_firmware:*:*:*:*:*:*:*:*Range: <3.29.67
- cpe:2.3:o:schneider-electric:imp219-1e_firmware:*:*:*:*:*:*:*:*Range: <3.29.67
- cpe:2.3:o:schneider-electric:imp219-1er_firmware:*:*:*:*:*:*:*:*Range: <3.29.67
- cpe:2.3:o:schneider-electric:imp319-1_firmware:*:*:*:*:*:*:*:*Range: <3.29.67
- cpe:2.3:o:schneider-electric:imp319-1e_firmware:*:*:*:*:*:*:*:*Range: <3.29.67
- cpe:2.3:o:schneider-electric:imp319-1er_firmware:*:*:*:*:*:*:*:*Range: <3.29.67
- cpe:2.3:o:schneider-electric:imp519-1_firmware:*:*:*:*:*:*:*:*Range: <3.29.67
- cpe:2.3:o:schneider-electric:imp519-1e_firmware:*:*:*:*:*:*:*:*Range: <3.29.67
- cpe:2.3:o:schneider-electric:imp519-1er_firmware:*:*:*:*:*:*:*:*Range: <3.29.67
- cpe:2.3:o:schneider-electric:imps110-1e_firmware:*:*:*:*:*:*:*:*Range: <3.29.67
- cpe:2.3:o:schneider-electric:imps110-1er_firmware:*:*:*:*:*:*:*:*Range: <3.29.67
- cpe:2.3:o:schneider-electric:mps110-1_firmware:*:*:*:*:*:*:*:*Range: <3.29.67
<3.29.67+ 1 more
- (no CPE)range: <3.29.67
- (no CPE)range: all firmware versions prior to 3.29.70
Patches
Vulnerability mechanics
References
1- www.schneider-electric.com/en/download/document/SEVD-2018-058-01/nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.