Critical severity9.8NVD Advisory· Published Mar 9, 2018· Updated Jun 17, 2026

CVE-2018-7238

Description

A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to execute arbitrary code.

Affected products

Schneider Electric/Pelco Sarix Professionalllm-fuzzy2 versions
<3.29.67+ 1 more
- (no CPE)range: <3.29.67
- (no CPE)range: all firmware versions prior to 3.29.78

Patches

Vulnerability mechanics

References

www.schneider-electric.com/en/download/document/SEVD-2018-058-01/nvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000