Critical severity9.8NVD Advisory· Published Mar 9, 2018· Updated Jun 17, 2026

CVE-2018-7231

Description

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'system.opkg.remove'.

Affected products

Schneider Electric/Pelco Sarix Professionalllm-fuzzy2 versions
<3.29.67+ 1 more
- (no CPE)range: <3.29.67
- (no CPE)range: all firmware versions prior to 3.29.71

Patches

Vulnerability mechanics

References

www.schneider-electric.com/en/download/document/SEVD-2018-058-01/nvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000