What is CVE-2018-7829?

CVE-2018-7829 is a high-severity vulnerability in Schneider-electric D6220, classified under Improper Neutralization of Special Elements in Data Query Logic. CVSS score: 8.8/10. Published 2019-05-22.

How severe is CVE-2018-7829?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Schneider-electric D6220

CVE-2018-7829

An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which allows an attacker to execute arbitrary system commands.

EPSS: 0.017 (75.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Schneider-electric D6220
Schneider-electric D6220_firmware
Schneider-electric D6220l
Schneider-electric D6220l_firmware
Schneider-electric D6230
Schneider-electric D6230_firmware
Schneider-electric D6230l
Schneider-electric D6230l_firmware
Schneider-electric Ime119-1ei
Schneider-electric Ime119-1ei_firmware

Weakness classification (CWE)

CWE-943 — Improper Neutralization of Special Elements in Data Query Logic

References

cybersecurity@se.com (x_refsource_MISC, Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2018-7829?: CVE-2018-7829 is a high-severity vulnerability in Schneider-electric D6220, classified under Improper Neutralization of Special Elements in Data Query Logic. CVSS score: 8.8/10. Published 2019-05-22.
How severe is CVE-2018-7829?: High severity. CVSS v3 base score is 8.8 out of 10.