CVE-2018-7227: Medium severity Schneider-electric Mps110-1 Firmware vulnerability
Published Mar 9, 2018
·Updated
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow retrieving of specially crafted URLs without authentication that can reveal sensitive information to an attacker.
Affected Software
80 affected components
Schneider-electric Mps110-1 Firmware<3.29.67
Schneider-electric Mps110-1
Schneider-electric Imps110-1er Firmware<3.29.67
Schneider-electric Imps110-1er
Schneider-electric Ibps110-1er Firmware<3.29.67
Schneider-electric Ibps110-1er
Schneider-electric Imp1110-1 Firmware<3.29.67
Schneider-electric Imp1110-1
Schneider-electric Imp1110-1e Firmware<3.29.67
Schneider-electric Imp1110-1e
Schneider-electric Imp1110-1er Firmware<3.29.67
Schneider-electric Imp1110-1er
Schneider-electric Ibp1110-1er Firmware<3.29.67
Schneider-electric Ibp1110-1er
Schneider-electric Imp219-1 Firmware<3.29.67
Schneider-electric Imp219-1
Schneider-electric Imp219-1e Firmware<3.29.67
Schneider-electric Imp219-1e
Schneider-electric Imp219-1er Firmware<3.29.67
Schneider-electric Imp219-1er
Schneider-electric Ibp219-1er Firmware<3.29.67
Schneider-electric Ibp219-1er
Schneider-electric Imp319-1 Firmware<3.29.67
Schneider-electric Imp319-1
Schneider-electric Imp319-1e Firmware<3.29.67
Schneider-electric Imp319-1e
Schneider-electric Ibp319-1er Firmware<3.29.67
Schneider-electric Ibp319-1er
Schneider-electric Imp519-1 Firmware<3.29.67
Schneider-electric Imp519-1
Schneider-electric Imp319-1er Firmware<3.29.67
Schneider-electric Imp319-1er
Schneider-electric Imp519-1e Firmware<3.29.67
Schneider-electric Imp519-1e
Schneider-electric Imp519-1er Firmware<3.29.67
Schneider-electric Imp519-1er
Schneider-electric Ibp519-1er Firmware<3.29.67
Schneider-electric Ibp519-1er
Schneider-electric Imps110-1e Firmware<3.29.67
Schneider-electric Imps110-1e
All of the following
Schneider-electric Mps110-1 Firmware<3.29.67
Schneider-electric Mps110-1
All of the following
Schneider-electric Imps110-1er Firmware<3.29.67
Schneider-electric Imps110-1er
All of the following
Schneider-electric Ibps110-1er Firmware<3.29.67
Schneider-electric Ibps110-1er
All of the following
Schneider-electric Imp1110-1 Firmware<3.29.67
Schneider-electric Imp1110-1
All of the following
Schneider-electric Imp1110-1e Firmware<3.29.67
Schneider-electric Imp1110-1e
All of the following
Schneider-electric Imp1110-1er Firmware<3.29.67
Schneider-electric Imp1110-1er
All of the following
Schneider-electric Ibp1110-1er Firmware<3.29.67
Schneider-electric Ibp1110-1er
All of the following
Schneider-electric Imp219-1 Firmware<3.29.67
Schneider-electric Imp219-1
All of the following
Schneider-electric Imp219-1e Firmware<3.29.67
Schneider-electric Imp219-1e
All of the following
Schneider-electric Imp219-1er Firmware<3.29.67
Schneider-electric Imp219-1er
All of the following
Schneider-electric Ibp219-1er Firmware<3.29.67
Schneider-electric Ibp219-1er
All of the following
Schneider-electric Imp319-1 Firmware<3.29.67
Schneider-electric Imp319-1
All of the following
Schneider-electric Imp319-1e Firmware<3.29.67
Schneider-electric Imp319-1e
All of the following
Schneider-electric Ibp319-1er Firmware<3.29.67
Schneider-electric Ibp319-1er
All of the following
Schneider-electric Imp519-1 Firmware<3.29.67
Schneider-electric Imp519-1
All of the following
Schneider-electric Imp319-1er Firmware<3.29.67
Schneider-electric Imp319-1er
All of the following
Schneider-electric Imp519-1e Firmware<3.29.67
Schneider-electric Imp519-1e
All of the following
Schneider-electric Imp519-1er Firmware<3.29.67
Schneider-electric Imp519-1er
All of the following
Schneider-electric Ibp519-1er Firmware<3.29.67
Schneider-electric Ibp519-1er
All of the following
Schneider-electric Imps110-1e Firmware<3.29.67
Schneider-electric Imps110-1e
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Schneider Electric Pelco Sarix Professionalto a version that resolves this vulnerability.Fixed in 3.29.67
Event History
Mar 9, 2018
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
DescriptionWeakness
Data Sourced
via NVD·11:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-7227?
CVE-2018-7227 is considered a medium severity vulnerability due to its potential to expose sensitive information.
2
How do I fix CVE-2018-7227?
To mitigate CVE-2018-7227, upgrade the firmware to version 3.29.67 or later.
3
What types of devices are affected by CVE-2018-7227?
CVE-2018-7227 affects various Schneider Electric's Pelco Sarix Professional devices running firmware versions prior to 3.29.67.
4
Can CVE-2018-7227 be exploited remotely?
Yes, CVE-2018-7227 can be exploited remotely through specially crafted URLs without authentication.
5
What sensitive information can be exposed by CVE-2018-7227?
CVE-2018-7227 can potentially allow an attacker to retrieve sensitive information stored within the device.