High severity7.5NVD Advisory· Published Mar 9, 2018· Updated Jun 17, 2026
CVE-2018-7235
CVE-2018-7235
Description
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of 'system.download.sd_file'
Affected products
2<3.29.67+ 1 more
- (no CPE)range: <3.29.67
- (no CPE)range: all firmware versions prior to 3.29.75
Patches
Vulnerability mechanics
References
1- www.schneider-electric.com/en/download/document/SEVD-2018-058-01/nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.